https://www.zdnet.com/article/android-malware-can-steal-google-authenticator-2fa-codes/
I recommend using a password manager and doing 2FA through that. I’ve been using 1Password for a while and recently switched to using it instead of Authy for all my 2FA accounts. I think most of the popular password managers should support this.
Some password managers to consider:
katana