That’s a pretty decent metaphor, replacing online safety with physical safety.

2FA is trivial and non-annoying if integrated with a password manager like 1Password or ButWarden. Not sure what your problem is, unless you truly like doing risky things like racing motorcycles without any safety gear. You know what they call people like that? Organ donors. Your online presence leaks all sorts of data that can seriously affect your meatworld existence.

Edit: I mean, JFC -- GitLab just popped an exploit that can see accounts without 2FA trivially exploited and taken over(https://arstechnica.com/security/2024/05/0-click-gitlab-hija...), with the only possible mitigation being TOTP (verification codes, third-party 2FA). Attackers can still conduct full password resets, but without access to 2FA the original owner can still keep attackers out and retain control of their account.