Multi-Factor Authentication: How It Defends Against Threats and Why It Matters