This query didn't get updated and could let you through an explicit "Sign with MFA" action if you have only disabled factors on your account.
- Disabled all factors.
- Used explicit "Sign With MFA".
- Before: Went through.
- After: Sensible error.