Ask HN: Why doesn't Amazon have 2 Step for Consumers?

They have it on the web services side of the business but not for consumers. Seems like a huge oversight.

This was brought to my attention by a friend who is being attacked by a cyber criminal. The hackers keep calling into Amazon and getting his password reset. He can't enable 2 step to do anything about it.