This is a security flaw surely?
Accessing the account with MFA is preferable to having a password. Time to catch up!