Thats it. And as messed up as it is maybe people will finally wake up to using better passwords. I'm really tired of local news covering this stuff and barely mentioning or not mentioning at all how the "hackers" are getting into the accounts.
The typical two factor is a password (know) and SMS to a cellphone or code to an email (have).
...though that creates a vulnerability when the cell number can be ported, or the same password is used to access email... better to use authenticator apps or a physical "key".