You're misreading, you have to "verify" your account first as well as set up MFA.

Verifying just consists of confirming your email via a one-time token. Setting up MFA presumably just makes sure there's no impetus to hack a bunch of old accounts.