You need to have MFA for HUBPlus because you are storing people's bank account numbers, SS numbers, W2's etc.
Not having MFA puts our clients and their employee's at risk for having their PII exposed.