I finally turned on 2FA for my email and the login attempts dropped off in about 10 days
I was getting 3 or 4 "new sign in" alerts a month on my main account, which was mostly noise until one came from a city I've never been to. Turned on the authenticator app instead of SMS back in March and the junk alerts basically died out within a week and a half. Is an authenticator app really that much safer than text codes, or am I just getting lucky with the timing?