⚠ 0 documented legacy MFA failures — and counting.
A running record of every breach where SMS codes, OTP apps, and push notifications got bypassed, stolen, or simply ignored. No spin. Just receipts.