What I don't understand is why they don't just force password resets with strong, unique passwords. Add language strongly encouraging 2FA. Seems like a less dam

What I don't understand is why they don't just force password resets with strong, unique passwords. Add language strongly encouraging 2FA. Seems like a less damaging option than telling everyone that their personal security practices are dumb and hackable.