How can 'enforced MFA' be an 'enterprise' feature?

Security is not a ‘feature’. Sort it out please….