There's no question such solutions have been available, but the reality is that most companies haven't implemented them.

Even if a company is aware of TFA, it's still probably cheaper and faster to get it via Google's products than implement a solution in-house using RSA, etc.