Just a suggestion that by a quick ctrl+f has not been mentioned here.
I decided I wanted to get rid og MS auth when I switched to Graphene, I wanted to use an open source MFA app, and did not want two MFA apps.
Planned to use SMS authentication, but it turned out I could use number matching in the Outlook app, and afaik that serves as strong MFA in MS365.