You can assign Conditional Access and MFA for services and sites listed the Cloud apps and actions area. Check the picture.
If you have created an app then you can assign the Contional Access rules for it.
So, you can't directly require MFA for untrusted locations.
The source for picture.
https://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa