Office 365 2FA

Question

I manage a 5 site Oncology practice and most users do not have company supplied cell phones and they are not allowed to use them for business use. I understand why it's mobile only but has anybody at Microsoft considered the fact that some companies would like to implement 2FA but they can't because their users aren't allowed to use their phone for work.

I have been trying to solve this, my MSP says simply let them use it anyway, management says no, best practice says implement 2FA and round and round I go. I also have a comment, 2Fa is set to not bother us more than once a month when at the office for those of us who use their cell for work but there are times when it goes full stupid and drives me crazy asking for 2FA, then it's quiet again. I have some users who will lose their ever lovin minds over such inconsistencies, thoughts?