Because the way it’s implemented in 99% of cases is password reset uses your phone for validation. But that’s not true 2FA. It’s a widespread lack of courage w

Because the way it’s implemented in 99% of cases is password reset uses your phone for validation. But that’s not true 2FA. It’s a widespread lack of courage which I think afflicts many areas of the western world right now. Instead of making things right, everyone just says well if you lose your password then it’s ok, just do x y and z and you can reset your password. Never mind the fact that this completely ruins the whole point of passwords and 2FA. People aren’t brave enough to just confront the plain fact that in order to have security, you have to let your customers deal with the bitter consequences of losing their passwords. Instead of rightly putting the burden of managing passwords on the consumer, we treat them like children at the expense of sanity and order. Just strong passwords and backup passwords is way stronger than 2FA anyway