Comment by jonpaine

WPEngine, who were just recently compromised and only finally announced 2FA less than two weeks ago...

Other than that, I don't disagree with your point. :)