The real moral is to not build your company without any modicum of user support.
The users who have any clue what 2FA is are not the ones getting their account hacked. They are the 60+ year olds who use Facebook as their only contact with friend and family, unfortunately.