Have work issue you a hardware FIDO token (such as a yubikey) or give you separate cell phone just for work. They legally can’t make you upgrade but if your phone can’t get enough security updates to install an Authenticator it is probably time to upgrade to be honest.