The trouble is if it is on the service to do the support, they can revoke support at any time. They could use start tightening the screws on device attestation tomorrow for business reasons and drop support for your browser or phone.
How would we add MFA (in the broadest sense) without services supporting it? Or multiple MFA devices?