Because it is. Total surveillance only works if the people are forced to wear the tracking collar. The next steps are tying it to CBDC, that require a phone number to access your wallet, and tying it to realid/passport to restrict travel.
2FA has become the wedge to break privacy into a million shards.