I don't think this is a correct response.  QBO is essentially blaming the bank for requiring MFA.  It seems to me that the real issue is that QBO does not connect to the bank using OAuth standards which would save a secure token for some reasonable amount of time (month?) once a user account is verified once.  Our QBO account will not remain connected because it relies the connection to be re-verified every time.  This is maddening and it destroys my ability to have book keepers working in QBO on invoice matching, etc.   I always get the message asking "can you update payments in QBO?"...