when you deploy flows to S3 block, we only upload files, we never delete any objects there, so MFA shouldn't matter in this context; the block doesn't even have any method atm to delete any objects so it should be save for you to use with your MFA setup