I’m amazed but not terribly surprised to find one part of the UK government attempting to shore-up cybersecurity of individuals, whilst another part simultaneously attempts to coerce a vendor to drill holes in their security:

https://stopthinkfraud.campaign.gov.uk/protect-yourself-from-fraud/protecting-against-online-fraud/turn-on-2-step-verification-2sv/