Since there is no requirement for anyone to use them... people don't use them. If people aren't forced to do the right thing, they do the lazy thing.

Usually through service accounts. Those are single factor.

How bugs are still possible now when we all write everything in Rust?