Outcome reported in the Prevent Account Sharing talk: after enabling email-based MFA weekly for users with 4+ concurrent login sessions, the number of login sessions per user dropped, total usage continued to grow, and signups gained roughly 27% on the regression line — with the caveat that organic search was also increasing, so the uplift cannot be attributed entirely to MFA.