1. I tried just logging in (path of least resistance) but that just signed me into CP and showed me my other devices. So I had to delete the profile and start over. I did this from within Company Portal, seems cleaner this way.
2. My test account I am using just uses Text for MFA, but from my understanding deleting your MFA registration will do nothing to resolve this... unless you are housing your MFA within the work profile (protip: don't put your MFA app in the work profile 🙂 ) MSAuth is just your second factor authentication mechanism that Intune uses, but has no control over. Deleting it is along the same vein of changing your Azure password, it isn't going to change your access or fix account/device related problems.
3. Oh interesting, I do see two, but I have seen that in the past (the far past) where new OS versions may change the device string (Unique identifier), which then Intune thinks it is a new device and creates a new entry instead of matching it to the old one. I'd very much suggest deleting both devices if you are still having issues. You know a lot for not being IT, I'm impressed, and also sad that you had to go through this forum instead of your IT support.
4. I am my on my workplace's IT mobility team, so yes? haha
Step 1) Unenroll
Step 2) Have IT remove all records of the device (Intune (endpoint.microsoft.com) and Azure (portal.microsoft.com))
Step 3) Remove Company Portal from the personal profile (don't factory reset unless you really want to)
Step 4) Re-enroll
Should give you a fresh start and tell Intune to actually try running compliance policies against your device, instead of whatever it is doing now. I hope this will work and save your device from becoming a dumb brick!