Hi Guys,
Its 2024 and this is my finding concerning this issue. Setting MFA to Enforced requires the user to setup an app password to sign in to non-browser applications. On the other hand, Enabled uses the MFA methods that are set for the user and does not require as a mandatory process of creating an app password.
Thanks, i hope this helps.