[zie]

At least one reason: cyber-security insurance policies are starting to mandate MFA, because they are tired of paying out on insurance claims.