You are incorrect, quote from the article: all CloudFlare.com accounts use two-factor authentication. We are still working with Google to understand how the ha

You are incorrect, quote from the article: all CloudFlare.com accounts use two-factor authentication. We are still working with Google to understand how the hacker was able to reset the password without providing a valid two-factor authentication token.