It's actually a moment for 2FA. Also the other commenter is right about victim blaming. The notification about a suspicious login should give appropriate optio

It's actually a moment for 2FA. Also the other commenter is right about victim blaming. The notification about a suspicious login should give appropriate options to safeguard one's account from a takeover.