Fidelity does have an extra layer of protection as scrabbler1 suggested. Not thrilled with having to get a pass code every time I want to log on, but might be prudent.
https://www.fidelity.com/security/soft-tokens/overview
I've been using the soft token feature for several months. I was reluctant to sign up at first, thinking it would be more hassle than I would like since I log in at least every 2 or 3 days. But I've found the extra five or ten seconds involved to be a minuscule price to pay for the added security in these crazy times.