email

TL;DR:  Absolutely turn on two factor authentication, but that doesn’t fix an inherently broken protocol.  Do you remember paper interoffice