2FA is cool for things that are important, like my bank account, or probably my AWS account. We don't need it for everything and it's pretty annoying when rinky dink little websites force it on us.
Like Discus, Facebook, or Google? The problem with that is then you have another big ass company tracking everything you're signed up to and selling your data.