I’m a little surprised we don’t have 3 factor auth since smartphones make this easy to implement 1- something you are: required bio scan on phone 2- something

I’m a little surprised we don’t have 3 factor auth since smartphones make this easy to implement 1- something you are: required bio scan on phone 2- something you know- required password 3- something you have- your phone with 2FA already set up