While they don’t specify it sounds like they don’t even require 2FA to access their systems?