Every financial institution allows MFA independently. You can take it further and google allows it as well but that means one extra step- which is cool for me. I would suggest whatever bank or depository of your money that you use online make sure you do MFA period.

Set notifications for any transactions from banks

Turn on credit Freeze now (easily toggled as needed)

Never click a link sent to you - not even from friends unless you know where it originates from.

Use incorrect birthdate info when signing up for things as well as have a separate email. I liked proton.

Never ever let someone use your phone say no, sorry.