That’s what I mean by optimizing for efficiency. They’d rather not spend the money to operate in a way that allows for them to be secure or redundant.
Honestly if they are going to just skip MFA everytime it’s a bother they might as well just not use it