Hacking an account is still a valid concern though for various reasons
Let's assume you're doing the best practice thing and using a long and unique password for each service you use.
What benefit does a hacker have hacking your lemmy-based account? Considering that everything you post is public... There's simply nothing of value that you would obtain by "hacking" an account here... The only thing I can think of is if your a moderator of a community or an admin of an instance.
I just don't see any value to it... But even then.. 2fa is slated for v0.18 which is probably coming out in the next few weeks.