I have an all Ubiquiti setup and only use local accounts for everything. UDM Pro, 2 8 port switches and 2 APs, U6Mesh and another older AP. One of my accounts had me turn on MFA but every device still let’s me use a local account with a password and ssh key. Do you know what devices are forcing that?
The default phones set only report in when it’s one of a few devices contributing to the location of a lost device. You have to go in to settings to change it to report for all devices all the time which would make it more useful when not lost in a place like an airport or shopping center.
https://support.google.com/android/answer/14796936#all_areas