Almost everyone here was talking about a leaked database of accounts, so I went with that if the database leaks, shared secret 2FA is useless. The article says

Almost everyone here was talking about a leaked database of accounts, so I went with that if the database leaks, shared secret 2FA is useless. The article says data may have come from user input, so yeah, 2FA would actually help there and wouldn't "leak".