Well hopefully the 2FA data is encrypted and the app requires a pin or password to access.

Plus my password manager also needs a pin after it times out, and my computers all have their drives encrypted too.

It's plenty to stop casual thieves and such.