This looks for the registration being enabled on the account, rather than mfaregistrationstatus_r, making it take conditional access policies into account
Users[? accountEnabled ==
true
&& userType !=
Guest
&& credentialUserRegistrationDetails.isEnabled !=
true
].displayName