I believe strongly in MFA, but your implementation has failed. Once I added it to the android app it now says "invalid credentials" when I enter them in the app, and doesn't even get to the MFA screen. Same credentials work fine on the website, but it doesn't ask for the MFA I set up, which defeats the purpose completely.