It would be useful if we could see which accounts have been given an override to MFA.
There is an existing feature request for a view that shows users who are in forgot token mode. That is AAAS-12873. Please create a support case and mention AAAS-12873 somewhere in the case if you'd like to follow that feature request.
WatchGuard Customer Support