@bnpluss they're few and far between. DigitalOcean, Nominet, some banks etc. Basically, the majority of sites which boast 2FA are mistaken.