I mean, in practice, the 'right set of people' just don't use the service, so you're probably right.

I've probably made about ten discord accounts with random names to join some one off server, then gone back to IRC, because it just works.

I think the "check box" in this case should be the act of opting into 2FA. I've expressed this to Discord before when asking why they require reCAPTCHA upon login, even for an 2FA-enabled account like mine.