[jmurphyau]

I would see Apple's recent addition of 2FA support to iCloud passwords would be a good (and maybe the only) 'average person solution'? MS Authenticator is also good as you can sync it and if you get a new phone you can get the same 2FA codes again