It's going to require a law: if you require 2FA, then TOTP or HOTP must be offered as an option.
Reply on news.ycombinator.com