> This is the sort of performative response that is the problem. Let's say we force Google to switch off 2FA. Now we have exposed millions of people who don't know any better to phishing attempts and financial loss.

Could be just option hidden somewhere in the settings. Don't need to turn it off for all

> And the group we are trying to help isn't really better off.

That's just your assumption