And by "positive step," you mean "complete waste of time that provides security theater but no actual security."

The biggest effect of so-called internet 2FA is that it's harder for you to regain control of your account after it's been hacked, as the hackers are better at breaching "2FA" systems than you are.