He mentions using two-step verification though. That doesn't mean it's not possible, but that makes a lot harder to get into his account.