> System rules can, and often are configured to prevent password reuse well before 2FA.

That does not at all help people who reuse passwords from one site on another.