Under the new ZTA guidelines established by OMB M-22-09: Agencies must use strong MFA throughout their enterprise. This means all agency staff, contractors, and partners use phishing-resistant MFA for privileged access and soon, all access.

For public users, phishing-resistant MFA must be an option. Meaning signing into a government website to do your taxes

For most of your basic insurance needs, not including your sensitive data, any MFA will probably suffice