Accounts without MFA now see a small banner on the dashboard with a one-click link to set it up. The banner stays out of your way once MFA is on. We're deliberately not forcing MFA yet — but we will, for admin accounts, in a future release.