Maybe the hackers have already figured out how to compromise that at scale, so they have to go to 3fa. Like a few years back when they were stealing tax refund

Maybe the hackers have already figured out how to compromise that at scale, so they have to go to 3fa. Like a few years back when they were stealing tax refunds by filing before you or filing for people who'd passed away that tax year.