A high assurance session is one where a user logs in with MFA? However, now all users have to login with MFA, so updating the Session Security Level Policies to require 'High Assurance' isn't really doing anything?

I'm studying for the Identity and Access Management exam, which is why I'm thinking about this.  Any insight is appreciated! #Ladies Be Architect