Comment by OtherShrezzing

Seems like a problem booking.com could instantly eliminate by enforcing 2FA for hoteliers.