Because for the vast majority of people yet another password, or even yet another 2FA code is an anti-feature.