Payment info is a good use case for 2fa though. Personally, I use vaultwarden to hold my payment details. Open source and I choose my log in requirements, although 2fa is required at least once. From then on, fingerprint on my phone is fine or pin on a browser.