Was just asked by a customer. My reply is since our software is on their computer, they control access to all the software on their computer. (Especially since we do not require constant internet connection!) So any need to prevent access, whether you call it MFA or (what is not un)common sense, thinks like a pin, WIndoes password, Windows Hello, ant best a BIOS password are available.