“Google estimates that less than 10 percent of its active users have two-factor authentication enabled”

Link. 2FA is a PITA – and Google does best by far