Security has to be a top priority. There are large sums at stake and some passwords will leak out. I'm very wary of using third-party tools that require a password. Their intentions may be good, but I can't know how good their security is.

2-factor is not perfect, but it's an extra layer that can help. There are also alternatives such as the SQRL system from security guru Steve Gibson https://www.grc.com/sqrl/sqrl.htm