You're assuming the laptop has malware installed capable of pretty unrestricted access. At that point, all bets are off.

It can just forward code, relay cookies, etc. 2FA protects against someone peeking at your keyboard, or reused passwords, not malware.