I recently ran through an MFA enforcement campaign and had to build that app into my instructions. “Make sure it’s the Microsoft authenticator, not the first result in the paid ad slot” because so many people were installing that app. I do deal with pretty low levels of tech savvy, but still.