MFA

MFA is the most recommended configuration for create/update/delete operation because it is how you can protect your organization in the case of Phising and MitM.

Now at day, Cloud Plans has the following options: View, Create, Update, Delete and User Management (MGMT)

MFA restrictions are easy to configure:

Select the Organization
Go to Organizations in the left menu
Click the shield icon (Organization settings (require MFA)) in the row of your Organization. It is only shown to the owner and the admins

Organization settings: MFA per operation

Tick the operations that must require MFA
Click Save

More details in Security (MFA).