Two-factor authentication (2FA)
MFA with exactly two proofs. Better than a password. Still not the ceiling.
2FA is multi-factor authentication limited to two pieces of evidence. The useful bit is mixing factor types, not the numeral.
Treat it as the floor for mail, VPN, and admin. Prefer phishing-resistant methods. A second SMS to the same phone that received the password reset is a round trip, not a control.
Fact source: ASD's ACSC glossary.