[yard2010]

There are many attack vectors to bypass MFA, especially sms based MFA

[jefc1111]

True, but if you don't have it enabled / required then you're giving off signals of negligence which may extend into other vulnerabilities.