Authenticator is certainly the best method of 2FA. Phone numbers are definitely not secure.

I haven't really thought about Bittrex before. I'm tempted to start using Gemini, though. Coinbase has underwhelmed lately.