This is not common knowledge among non-technical people. In fact, many non-technical people don't even know what 2FA is.

Additionally, it can take some time to change security standards in a large company. Most companies that are not in high compliance environments focus their engineering efforts on features.