Regarding 1: Not everyone wants to buy a burner phone to do 2 factor authentication. And many (most?) employers won't provide one just for this.
The real evil are companies that require you to use a phone for 2 factor authentication and assert that they have the right to examine your phone because you use it for work purposes.
Don't use 2-factor if they're not going to provide the hardware for it. Demand a U2F (e.g. https://www.yubico.com/) if they don't hand out phones. It's not your account and you're only responsible for the security inasmuch as they provide the means to make it secure.
(Not necessarily directed at parent, but anyone who is unsure or worried about this.)
The real evil are companies that require you to use a phone for 2 factor authentication and assert that they have the right to examine your phone because you use it for work purposes.