When they want they can get pass any wall of security. The recent virus on financial app is more for the example. They are breaching the 2F password and we cant take anything for granted.
The longer the password , the safer it is...this presumption is old now....