Agreed, mandatory 2-factor authentication through ios/android is really what screws you. You can totally do without for the rest.
Problem still persists with mandatory phone number verifications every couple months. It's likely most services have a cronjob running for that.