Apple's iCloud: Lack of two-factor authentication allows remote data download

This is a vacuous article...Why does using Azure or AWS make it worse? Why would you get an email every time a backup was downloaded?

If you already have the user:pass for someone, why does it matter who holds the keys if the key was generated from the password?