I just don’t buy the argument that because most sophisticated attacks exist, then 2FA isn’t useful.

2FA protects you from someone getting access to a leaked password. They still can’t connect even with user and password, without doing a very elaborate hack. That’s a huge benefit.