The backend should use an exponential backoff to block repeated failed MFA requests within a short period of time like the one demonstrated in the video.