Do you use text messages for your 2FA setup? It's more work but phone-based 2FA can be circumvented without you receiving a message.