IT departments which mandate MFA on everything but don't bother offering a hardware security key option so it isn't hell deserve to log in and out of all their apps 10,000 times.