Clearly I didn't misread that. It's literally the very first bullet point?

The first bullet point is "Enter an email address or phone number".

That's not MFA. MFA stands for multi-factor authentication. If the authentication only requires a code sent to an email OR phone number, that's just a single factor.