Multi$-$factor authentication is required or recommended for access to high value accounts. This can be explained by the following design principle.

psychological acceptability.

least prvilege.

defense$-$in$-$depth.

economy of mechanism.