I’ve been going through updating all of my accounts (passwords, 2FA, etc.), and I’ve noticed that there are a lot of sites that don’t offer any form of MFA.
I can understand smaller services that might not have the bandwidth, but surely larger organisations are able to get this setup?
I think you’re vastly overestimating the digital literacy of the population as a whole.
Oh I realize how illiterate most people are with tech. But fully integrated systems like Apple’s Keychain and integration with Mac products make that a much smaller issue than it would otherwise be on the surface for many of those users. At least, until they don’t remember their Apple ID.