Think about your goals and threat models for MFA authentication