In other words, choosing all the boats in the photo isn’t improving their ML models anymore so they are doing what they should have done 10 years ago.

Quite possibly. Or they have found another way to more effectively train AI algorithms (I'm guessing immersing them in high signal Internet sources (Reddit, Twitter, Facebook, etc.). A client of ours uses Yubikeys to great success. It is a really elegant method for implementing MFA for endusers. A lot of entities that have mission critical information systems where user access needs to be granularly controlled and audited find these to be an essentially frictionless way of adopting best AAA practices into their orgs.