This is the single most effective way to stop credential stuffing. Even if they have your password, they can't get in without the second code.
Use services like "Have I Been Pwned" to see if your email has appeared in recent breaches. mega accs 3989x.txt
Given your goal for a "solid blog post," here is a structured outline and draft focusing on account security and the dangers of credential leaks. This is the single most effective way to