Why do some sites choose not to implement Trivial File Transfer Protocol (TFTP)?

Why do some sites choose not to implement Trivial File Transfer Protocol (TFTP)?

A.
list restrictions

B.
inherent security risks

C.
user authentication requirement

D.
directory restriction