I agree that 2FA is needed for their accounts and it's basic security they should be adding. It will solve the leaked or weak password problem, but 2FA doesn't really solve the phishing problem.
The reason is, as soon as you type in your tesla credentials into my fake web page, I can...