MFA Won't Save You From OAuth Consent Abuse
MFA is essential, but it cannot replace OAuth governance, least-privilege scopes, consent monitoring, and rapid revocation.
We haven't written up this one. Dark Reading has the full story — the link below goes straight to it.