Why MFA Falls Short And What Can Be Done About It MFA only makes sense if it is resilient against bypassing and hacking; otherwise, why would anyone enable MFA to only get mildly better protection?