If you have 2FA enabled on your online account, you cannot simply log in with just your password - you will also require the 2FA code. This means that even if someone manages to obtain your account's username and password, they will not be able to log into your account.