Such people need to stop being so lazy and need to get their shit together.
I would not say that they are stupid to not enable 2FA on their bitcoin related accounts. They are just having less knowledge about security of their accounts. We who have better knowledge should always try to educate them about this thing but if they still do not enable it while they know about it already then I can say they are careless or maybe they are just too confident with their account's password and they think that no one will be able to hack their accounts.
I certainly agree with you. Nobody wants to get hacked after all. These people seek knowledge and they would not share this kind of incident just to get bashed. The best thing that we can do for them is to share our knowledge regarding this matter so they would know what to do next time. Let's just stop victim blaming.
On the other hand, hackers are wiser and they move in surprising ways. Enabling 2FA upon registering on an exchange is the best thing that we can do for now.