I had it just today, it's slightly worse than I was remembering! The "Cancel" button is way less prominent.

Still, remember this is MFA - at least I'm pretty sure you can't have this as the only way to access your account. An attacker typically needs your password plus you to misclick here.