MFA will be disabled if SMS is the only MFA verification method for your account, leaving your account without MFA protection.

heroku telling you to fuck yourself