Watch the video. They state that they had MFA turned on before, and that they renewed their password and MFA within five minutes after the supposed security breach.

I believe that they already had MFA turned on.