Adding 2FA is as much work as adding a really good authentication protocol, with much better usability and security. But we don't have discussions like this ve

Adding 2FA is as much work as adding a really good authentication protocol, with much better usability and security. But we don't have discussions like this very often, therefore we don't have a consensus on which solution is the best alternative. I think this is a network effect problem (chicken-and-egg) more than a "perfect is the enemy of good".