Yes, MFA blocks access even if a password is compromised, as attackers would also need the second authentication factor.