No Laya, auth codes via #email is not #MFA. It's a complete bollocks of a solution; even SMS codes are better (barely) because they at least mean the user has a second device to auth the request instead of a random email account that might already be compromised from password reuse.