Many SMBs still disable multi-factor authentication to speed things up, but...

https://emilioezho292.theglensecret.com/what-is-the-blast-radius-of-a-change-in-a-microsoft-365-tenant

Many SMBs still disable multi-factor authentication to speed things up, but that’s a huge risk. Attackers love easy targets. Instead, set up MFA properly and keep it enabled