I can't make sense of the documentation about MFA becasue "users" seems to refer to my users, not ory network's users... if that makes any sense...

yeah it is hard to distinguish, internally we use "customers" vs "users", but that also does not really make sense for others regardless, we currently have no way to enforce MFA

thank you. For best practices sometimes people are required to have MFA on anything that handles user data, like Ory.

yes, we definitely agree that it should be possible