> All the "hacks" against iCloud have been social engineering Which would be a strike against Apple... > I don't see how users re-using passwords across sites

> All the "hacks" against iCloud have been social engineering Which would be a strike against Apple... > I don't see how users re-using passwords across sites or using weak passwords makes iCloud security a joke. Logins from new locations is the type of thing other cloud services (like Google or Facebook) protect against by requiring a challenge to proceed even if 2-factor is not enabled. iCloud only working when the user holds it properly is a very Apple-esque thing, but also still bad. Particularly their 2FA is pretty bad and can be easily bypassed. Because, you know, that good UX flow is preferred to actual security.