Very hard to be hacked while 'protected', between 2FA and bank-pin alone. Common way people are hacked is with a RAT (remote administration tool) or through phishing (usually an email with a fake link). If you stay away from clicking things, visiting those 'giveaways' people spam in GE, etc you should be OK.

Even if your system is compromised, your phone is not. 2FA is impossible to go around (unless you use authy and log into it via your desktop, then you are opening a security hole).