> but 23andme could have prevented this by requiring 2FA for all accounts They could have prevented that by not keeping the data longer than needed to send it

> but 23andme could have prevented this by requiring 2FA for all accounts They could have prevented that by not keeping the data longer than needed to send it to the user.