The era of simple passwords is coming to an end. But while companies worldwide are adopting multi-factor authentication (MFA), a dangerous fallacy is emerging: a one-time query of a second factor does not make a system truly secure in the sense of Zero Trust.