Evaluate MFA method strength — hardware keys, passkeys, TOTP, SMS — with phishing resistance analysis.