“I would rather have questions that can’t be answered than answers that can’t be questioned.” - Rich Feynman
They had a huge problem with their encryption for a while but I believe it’s now fixed. Additionally, it was ran by Kim Dotcom, the guy who hosted Megadownload, until the New Zealand government took over. So it’s had faulty encryption and is hosted by a 14 eyes government agency. This is why privacy communities recommend alternative options to Mega.
Aegis is my absolute favorite for 2FA’s, give it a try for sure. Pretty sure it’s only available on Android unfortunately though.