Everyone already has the hardware for 2fa in their pockets too. This was simply a decision this company made to minimise barriers to their customers wallets.
Microsoft products in this area are weird to me. Like C#, Powershell is great on one hand yet annoying and more difficult to rangle on the other compared to other solutions that are out there.
I do wonder how long it's going to take for these device manufacturers to get wise and start hard coding their own host file on these devices with the addresses they use.
Last thing I had was a dishwasher by them a couple of years ago. Seals leaked about 6 months out of warranty and it cost about as much as a new one to replace them.
Given the sensitivity of the data in both cases they should have had mandatory 2fa set up. However, the other person is right, there's probably a ton of tech illiterate people using this and they likely saw better security as barriers to entry and making less money.
Everyone already has the hardware for 2fa in their pockets too. This was simply a decision this company made to minimise barriers to their customers wallets.