The MFA Identity Trap: When Authentication Creates a False Sense of Security