Be sure to 2fa Dropbox too. Excluding hackers getting in to the server, it'll prevent people from being able to login as you.