That is a fair point! Yet it's sad that we live in a world where our apps aren't sandboxed properly and where we have to worry about our own devices being compromised.

However, 2FA really is one of the few solutions that could work here, unless the method used can also be compromised.