@mathowie you should have 2FA enabled on ANYTHING important, which makes these attacks completely irrelevant