The last straw for me was having an account stolen after foolishly resetting the account password while on hotel wifi. No TFA, that part was my fault.

The investigation took weeks and the final resolution was "the account is gone, the credit in it is gone, just create another account."