Why is it that any small new company with a tight budget would implement this without blinking, because people just expect it now, but IG cannot?
The only thing IG has going for it imo is the breadth of assets and CFD account.
UI/UX is clunky. Sorry for the negativity but it's true.
Look at how Trading212 set up 2fa, probably one of the closest competitors.
If they can do it, so can you.
People have legitimate concerns about existing or unknown security threats.
Listen to your customers, or eventually get disrupted.
Of course, like others say, it's always optional.
But when it's done right, it takes a few extra seconds.