Perhaps related to this?
https://www.reddit.com/r/oracle/comments/1hsjxz9/oci_what_ac...
I know this for two reasons: First of all, I manage two separate Oracle Cloud Accounts (one for a different person). The second one wasn't nuked, despite both using the same cloud computer and being created on the same day.
Second, I have MFA enabled since day one. I logged in many times, before, during, and after these E-Mails bombarded me. They never applied to me as my security policies were already like the mails requested!
So, sadly. It has nothing to do with Oracle enabling MFA. Especially because I'm not stuck at an MFA screen, but because they disabled my account and support said it was deleted, without notice or warning, and they can't tell me why and there's also nothing they could do.