"My nightmare scenario is I wake one morning and my bank account has been hacked and all my money is gone!!"
Passwords. People often use the same memorable password for many sites. Password breaches make your identity vulnerable.
SIM swaps. Hackers can swap your SIM, so they receive a verification code not you.
Authenticator. 2FA authenticator apps are a useful tool but require a setup for each website.