Though I've recently switched over to simply putting all the 2FA secrets in my keepass database, that's good enough for me in terms of security.