Unsure the user did not have it enabled.

Edit:: Another commenter in this thread indicated MFA did Not protect them.