it doesn't matter. The main point is the apparent security [mis]architecture at Twitter such that those posted credentials is enough to get access. It means no

it doesn't matter. The main point is the apparent security [mis]architecture at Twitter such that those posted credentials is enough to get access. It means no 2FA, the bare minimum for prod access. It probably also means no role based access control (or such an ugly one that instead of roles assigning/modifying/etc. people resort to posting/sharing credentials of critical prod accounts).