I finally understand why I kept seeing headlines saying "the Twitter hack could have been much worse"