The problem is so many services requiring SMS to be that second factor. From what I’ve heard it’s easy enough to steal a sim that if you’re being explicitly targeted it’s basically the same as no second factor. Yet even if using an authenticator app most services require you to still have SMS/phone as another option for the 2FA.
For Authy specifically they’d need to guess your master password and then hijack your phone number, and for users of Authy I suspect their passwords are not easily guessed as it’s already a step above the standard SMS only 2FA most services require.
It’s crazy that for something so important the dems are handling it as if they had no plan. Donald Trump should be the absolute easiest possible competition for their candidate to beat. It’s like they learned nothing from 2008 and the energy around Obama. We need younger candidates who can communicate to the public well. Better policy means nothing to most swing voters if it can’t be communicated effectively.