The trouble with this is the baseline is getting to high. You've got age verification coming, google rolling out phone verification for websites, etc. Once that is rolled out, accepted and "easy" it will be used for everything important "for security" and then everything not important because hey, you were doing anyway?

The reasonable position will be slow marched into hell same as the rest of them, just a few steps behind.

I feel like this is the best compromise. Thanks for wording it.