While enabling two-step verification for an Atlassian account has no cost (Enable MFA for your Atlassian account), and any individual can do it, administrators often want to enforce it across all of their company managed accounts, for consistent security across the board.

Atlassian Access offers this option (Enforce MFA on managed accounts), but at a cost that might prove to be challenging to justify only for this feature.

Suggestion

Given that nowadays accounts secured only with username and password expose a big security vulnerability to businesses, it would be pivotal to have the ability to enforce MFA without additional cost, making it a basic security feature for Atlassian Cloud.