I have MFA set for the same Twitter handle but couldn't see it on Instagram. I thought that by reporting all the erroneous "password request" emails they might have flagged something (not sure why they have that link in the email if it doesn't do anything). Obviously I'm seriously small-fry so wouldn't expect any kind of special treatment but not having MFA does seem to be a bit lacking.