a lot of the improvements made (also for v9) makes it easier to implement external providers like Azure AD that has MFA builtin - that would be one of the solutions that can be used today. MFA out of the box is a bit hard, since ppl tend to have different requirements