He’s treating user security like a marketing tactic https://www.wired.com/story/twitter-sms-2fa-twitter-blue/
This is only a secondary issue, IMO.
As ever, X.com, the #EverythingApp, is his final goal. Or, put differently, "it is all about payments".
For this, you need #2fa
And also: when selling (giving?) data to his investors (China, Saudi Arabia, Qatar).--Crackdowns in Saudi Arabia were already in the news.
https://fortune.com/crypto/2022/10/31/the-real-reason-elon-musk-bought-twitter/