I’m a sole practitioner also and don’t know how to remove multi factor authentication…. Pretty sure I wouldn’t even consider it. Just not that much of an imposition for the extra security and peace of mind.

I'm more concerned with hacking phishing, and theft than someone in my office or a family member. We’re responsible for a lot of personal information and with all the companies and people I know who have been compromised my feelings are the more security the better…. 

maybe I’m a bit paranoid but I just dropped about 500 to add some cyber liability coverage to my insurance policy.