Lifetime and ServiceCenter is an important console and it need security control to prevent and protect any one try to access. I think Outsystems must have a configuration feature to enable/disable the Multi-Factor (MFA) to protect the Lifetime and ServiceCenter.
The Idea, Outsystems should have the systems logic like Microsoft O365, after login (user+password success) it able to request user to input MFA or tap the allow notification on Microsoft authenticator (Mobile App) then it will redirect to ServiceCenter/LifeTime.