MFA - We constantly hear about two-step verification failure so, please remember this - All Authenticators Are Vulnerable but NOT all authenticators equally vulnerable.

Here’s a list of common credential types with an assessment of vulnerabilities (excluding coercion)

https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/All-your-creds-are-belong-to-us/ba-p/855124