Flag “Force MFA for all users” does not affect the “Skip” button display

Answer

1. MFA self management does not respect login policy (1) : This GitHub issue describes how MFA types can be enabled/disabled in the login policy, but the setting is not respected in the self-management API and UI, allowing users to set up disabled 2FA factors even when not allowed by the login policy.
2. Skipping MFA Setup in Zitadel Action for Auto-Fill User Data (2) : This discussion mentions the "Force MFA for all users" setting and explains there's a separate "Multifactor init check" lifetime setting that controls when users are prompted to set up MFA.