Will this make SMS-based MfA more vulnerable if the government chooses to adopt / implement using SMS? There are other options but if the EO only says MFA ..
But besides that, the federal government already has an SSO provider that supports smart cards, U2F, and TOTP. I suspect many agencies will choose to adopt that rather than trying to roll their own SMS auth.