Reply to post:

Most people are too thick to understand the issue or even think about the issue and even if they did think about it and understand it, would be too lazy to do anything about it.

So make everybody use 2fa on every login in. Sorted.