Hacker News Reader

WPEngine, who were just recently compromised and only finally announced 2FA less than two weeks ago...

Other than that, I don't disagree with your point. :)

But who gives a shit? You're not providing an entry in to your own networks if they get compromised, and they'll clean up the mess.