Your Multi factor authentication is a joke.
For MFA in Office 365 it generates and app password that then needs to be used the outlook client, phone tablet connections. It is the type of PSW that needs to be printed out because it is too complicated to remember. Give the user and option to change it to as memorable passphrase not some random generation of letters. Now i feel more insecure since I have to print out the passwrd and keep it somewhere