TOTP for 2FA is incredibly easy to implement. So what's your excuse?