I can confirm: my 2FA has been hacked on Coinbase. My Social Security number + DOB are out on the internet, and it makes it trivially easy to hack companies with poor security protocols like Coinbase, Authy, AT&T, TMobile, Comcast, Yahoo.