As of Dec 2020 only 2.3% of active accounts had any form of 2FA enabled [1]

[1] https://www.bleepingcomputer.com/news/security/twitter-revea...