This question of “Secure by Design” will be one that all security practitioners will be asking of their vendors.

Those vendors that have a separate SKU to add MFA to their products, this is directed towards you. This must be in your product by default!