tldr: An attacker that compromised an account can maintain access even after user changes password. Exploit vector uses 2FA. imo not a big deal as a prerequisi

tldr: An attacker that compromised an account can maintain access even after user changes password. Exploit vector uses 2FA. imo not a big deal as a prerequisite is a breached account which is game over already.