Wait, are you arguing that 2FA is a waste of time/not actually effective? What alternative do you propose then to provide additional security to accounts?

Or are you arguing purely in the sense of SMS and Email based 2FA?