The hacker cannot independently get through the 2FA without contacting you.
No. They cant. Which was my entire point.