A lot of 2fa requirements seem to be because people choose poor internet security, but instead of teaching people how to properly create and use strong passwords and not get caught by phishing schemes, they add complication for the rest of us.