While enforcement is on, MFA can't be switched off for anyone, so the reset takes a few steps:
The next time that person signs in, they're asked to set up MFA again with their new device. Note that turning enforcement back on also signs out anyone else who hasn't configured MFA yet.