A password is one factor, and one factor is one theft away from compromise. Multi-factor authentication means a stolen password is a dead end rather than a doorway, blocking the overwhelming majority of account takeovers.
“One factor is one breach. Add another.”