Still better than no MFA.

I like to include that because it can cause ppl to drop MFA completely if only SMS or email is available