That’s not how that works. Do you really not know what MFA is or are you joking?

My apologies if it was a joke.

A password is simply something you know. You only need 1, not 2, not INFINITE as you say, just 1.

Then you need another factor (something you have, or something you know, or someone you know, etc. The password(s) is(are) only one of the two factors.

The second factor can be a certificate, a hardware token, a seeded RNG, biometrics, a geo-location, and on and on.

GitHub should have MFA at least optionally, Nostr should have MFA at least optionally. It’s up to them or

If Microsoft decides it’s mandatory on their platform, so be it.