Slightly tangental, Fidelity also has the option to put your accounts in "lock down" mode to prevent funding *outflows* (even transfers between accounts). This can help secure your account in addition to 2FA. I learned about this recently after +10yrs at Fidelity. Sadly, I don't think it is enabled by default.
I wish my bank had the same sort of option to prevent someone from just randomly guessing my account number for an ACH transfer.