Security designers address this with something called "defense in depth": that's a series of overlapping defenses that are meant to correct for one another's weaknesses. Your bank might use a password, a 2FA code, and - for extremely high-stakes transactions - a series of biographical questions posed by a human customer service over a telephone line.
4/