Ask HN: Why isn't OpenAI allowing users to enable MFA?

I may be wrong about this but I couldn't find the option. Isn't that a major security vulnerability?