Why am I asked to set up MFA before I can turn enforcement on?

To stop you from locking yourself out. If you haven't configured MFA on your own account yet, a Configure Your MFA popup appears when you save. Scan the QR code with your authenticator app, enter the 6-digit code and click Verify & Enable. Enforcement is switched on once your own MFA is verified.