Hacker News Reader

Why not give customers the option to choose to enable it then?

The kind of customer that reuses passwords is probably the kind that won't enable 2FA if it's optional.

Sure, but then it's on them rather than you.