When MFA becomes an availability problem
If only one engineer's phone holds billing or root MFA, vacations and device loss become outages. Lockout is an operational risk—not just security theater.
Architectural fix
Centralize enrollment; maintain multiple authorized viewers; document emergency access. Avoid cloning seeds to many personal authenticator apps.
