Ok, I HAVE to add. The whole story revolves around a really bad password. Yet, the takeaway is "GO FOR 2FA", which is utter bullshit. Strong unique passwords (and a good password manager, if you can't remember) will suffice and won't lock you away if you ever lose your cell service.