They don't want those details for authentication they want it for surveillance capitalism. This should be obvious since most of the major sites were already demanding that shit years before they even had 2FA. Email and sms based 2FA is considered bad security practice and is being phased out by any serious organization in favor of OTP. No website gives a shit if you don't' care about being hacked, that is individualist thinking, your account being hacked causes problems for others not just the website operaters but other users of the website.