I spent a few years as an okta engineer implementing MFA. Sometimes they buy you an MFA device, but most companies just degrade their security by letting you us

I spent a few years as an okta engineer implementing MFA. Sometimes they buy you an MFA device, but most companies just degrade their security by letting you use phone mfa (even using your work desk phone for mfa). This, of course, is not the fault/problem of the people who refuse to install mfa on their personal device. Good for them.