Currently, when MFA is enabled Every default's to email to deliver the authentication code. This means that colleagues would have to manually add a mobile device.
It would be beneficial if it would default to a mobile device when it is enabled. Colleagues will not want to add a mobile device and if an account is already compromised, the use of email to get a code isn't secure.