We already implemented 2FA, but it's not yet forced for everyone. You don't want to patronize your customers ;)