> it only adds complexity, or worse yet users simply don’t use the more secure features of an application. This is true, on both counts. Adding top end securit

> it only adds complexity, or worse yet users simply don’t use the more secure features of an application. This is true, on both counts. Adding top end security does add complexity. The business should decide if it's worth it. And users generally want whatever is simpler, and will only use MFA if it's forced upon them.