Apple is late compared to the others, as usual. MS and Google had the "two factor" verification for years. It's also pretty easy to say that most of it was social engineering, it's been the most vulnerable way of getting information for a long time, as anyone in the security field knows.