It doesn't make it harder at all for the most common phishing methods. People hand over there account name and password quite readily without TFA and with it, they just have over the TFA as well.
It would protect against hacking but it does not protect against the much more common phishing.
(I still never went without my TFA for longer than it took me from the one that after more than a decade of use had trouble responding to button presses to a new one.)
