MFA is effective, but its weakest link is the vulnerable user who can be tricked into downloading malware through phishing and many methods.