That’s the reason I don’t open random emails and I never answer the phone unless I’m expecting a call/text from a specific number. I’m too paranoid about getting scammed/hacked. I’d be using 2FA if it wasn’t for the fact that I’d have concerns about potentially loosing access to my accounts because the trusted device stops working or something.