Two-factor Authentication

My friend literally got his account hacked and suspended because of someone cheating on his account without his knowing. So this to me begs to ask the question on why we don't have a system for two-factor authentication in place for logging in? I would love any response from a Riot employee but speculation is welcome as well.