World of EUC

You want number matching so that people aren’t targets for MFA fatigue attacks. If they keep getting Approve/Allow prompts on their device via a compromised account, they end up just hitting Allow to get the notification to go away

On my phone, Authenticator is protected with Face ID so that I dont need a PIN

Isn't Microsoft enforcing number matching for some time now?

I think he means...  you hit accept, enter the number, THEN you have to auth to your phone.  Mine does this, but it's fingerprint.