I believe the 2FA stuff became mandatory after all those celebrities with weak passwords had their nudes leaked

https://en.m.wikipedia.org/wiki/2014_celebrity_nude_photo_le...

And Apple being Apple, they designed their own solution. I actually like having a Secure Enclave on my device with easy biometric authentication across all of my devices

Calling for standards is a great thing usually but to be perfectly honest, the current ecosystem of FIDO, webauthn, TOTP, etc is a nightmare. I have three yubikeys and three or four protocols to manage on them.

People won’t adopt that, but they will adopt Apple’s.