Email Security / Multi-Factor Authentication (MFA)

One of our clients is asking us to move away from Homestead since after a Vulnerability test is was detected the lack of Multi-Factor Authentication (MFA) for the email. The test also detected the lack of email security configurations (DMARC and DKIM). After over 20 years we really do not want to move away from Homestead but we may not have any options. Do you have any comments on these matters?