Audience asks why MFA via a second device or an authenticator app was considered unsuitable, and what made email MFA the right fit. Andrei explains the goal was minimum user distraction: the team did not collect phone numbers (ruling out SMS), and requiring users to install a separate authenticator app is extra friction that risks losing them. Email was the simplest option with the least impact on user experience.