Comment by protomyth

So, how exactly does this work for the random developer that somehow ends up in the top 500 but doesn't have 2FA turned on?