When do we need multifactor authentication?

[dbosk]

Some students want to use MFA to protect a one-time code for a box to fetch a package.