In "Per-user multifactor authentication" I disabled MFA for one user; All got disabled

Hi,

I'm the 365 admin for our org.  Today I had a user that got a new phone and became stuck in a MS Authenticator app loop.  (The app required MFA to login to the app, but they can't login to the app because they aren't logged into the app.  This happened once before, and is a ridiculous Kafkaesque situation; but I digress.)

To solve it, I went to disable MFA on their account, allowing them to login to the app.  Then MFA could be re-enabled.  Problem solved.

And indeed that did work.

However, on the admin side (per the screenshot) I checked off their user account (the user starting with the letter "B") and hit the "Disable MFA" link.  A confirmation appeared asking me if I wanted to disable MFA for all selected users.  Because I'm the careful sort, I could still see that only that one user was checked off as the popover div didn't cover that much of the screen.

Hence I confirmed that I wanted to disable MFA for the selected users (i.e. that one user).

I then refreshed the page, and all users are now shown as having MFA disabled.

I'm 100% sure only that one user was selected, not everyone in my org.  That would've been foolish.

Trying to figure out what's wrong with this portion of the admin site.