@js The opening sentence, "Passwords are rubbish," excludes every person for whom "something you have" is not viable: refugees crossing borders, unhoused persons, children of abusive parents, adults with abusive partners, ...
"Mandatory 2FA is rubbish." would be a better start.