Polymorphic browser extension attacks: 2FA doesn't help?

The “finger-print” phrases in “Login with Device” varies from one login to another. Your account’s finger-print phrase probably aren’t used beyond emergency access and organization’s identification.