In the world of identity theft MFA ( multi factor authentication) is without a doubt mandatory - to avoid this step at the POS or in an online subScreen for convenience is a bad business model.
the more BNPL lenders grow and take more merchants the more they will get exposed.