I've been going through updating all of my accounts (passwords, 2FA, etc.), and I've noticed that there are a lot of sites that don't offer any form of MFA.
I can understand smaller services that might not have the bandwidth, but surely larger organisations are able to get this setup?
https://2fa.directory
A directory of common sites that offer (or don't offer) 2FA, which and how. I agree it should be a default feature. But maybe harvesting your full ID credentials is more juicy to many companies