> 2FA is designed to authenticate that this is you logging in. Wrong off the bat.

Pretty sure you are in agreement with the post here. IOW, 2FA isn't to authenticate the site.

Most of 2FA I use won't help you assuming the credentials I just gave the phishing site are immediately forwarded to the real thing. I will see a login verification, just like I expected, from the site I expected it to come from. Maybe, just maybe, I might notice that the login location is not where I am, for 2FA implementations that tell you that.