2FA is necessary because users still consistently fall for phishing attacks. Password policies wouldn’t effect that. There’s also the password reuse problem, t

2FA is necessary because users still consistently fall for phishing attacks. Password policies wouldn’t effect that. There’s also the password reuse problem, though better policies might discourage reuse, it’ll still happen.