This is a cancer that is spreading through tech. I believe SOC2 compliance requires 2FA and the people who set those standards are probably closer to politicians than to software engineers. We don't need stupid banners asking if it's ok to give the site our cookies and we don't need mind numbingly stupid security measures to protect us from ourselves.

The paternalism is getting more real on the web everyday.