Nothing is 100%, but 2FA with the 2nd factor being say text messages or an authenticator app goes a very long way trimming somebody from anywhere in the world hacking your account, it's worth the effort of setting up. Sure, if they can get you on the phone to get that 2nd challenge your toast...