When you face implementing a feature whose impact on the product is hard to predict (like MFA), stop and think first: define indicators that would tell you whether the situation gets better or worse, make sure the application records the data needed to compute them, and only then roll out the feature — ideally to a subset of users.