Per T400864.
Currently checking MFA of a user account requires to be a Phab admin.
Resolving this task depends on T393840: Update to Phorge upstream rPca176821 / Arcanist upstream rARCd2d2afd0 (2025-09-08) which will include https://we.phorge.it/rP39f3ac14673cafa0ef3d67b289b95903c2140a67 which would require another local patch on top to also allow members of acl*security_secteam.