While that's true, why should hackers be able to mass try password combinations. Shouldn't all services have heavy rate limits on password attempts, with accoun

While that's true, why should hackers be able to mass try password combinations. Shouldn't all services have heavy rate limits on password attempts, with account lock outs? Important services like my bank or teamviewer actually force email 2fa if I login from a new device. These things should be standard, especially for something as sensitive as a camera in your house. Most users will not use opt-in 2fa, that's why you have to force these things on them for their own sake.