In the last few days there have been a number of news stories about hackers stealing the user ids and passwords for five million gmail accounts.
You can check to see if yours has been stolen at
this web site.https connections or two step verification make no difference, because the Russians have been stealing the userids and passwords by hacking into the Google gmail servers directly.
The safest email approach would be to establish your own email server on the internet used only by you. Of course you would make it as secure as you can, but the real security would be that since it only has one user, it would not be worth the hackers time and effort to go after such a small fish. Their efforts got them five million gmail accounts, why should they waste time trying to get yours. They would probably never even recognize it was out there on the internet among the millions of other servers.