To clarify, this was new information added to the release within the past hour or so, which seems like the company responding to criticism. The original article

To clarify, this was new information added to the release within the past hour or so, which seems like the company responding to criticism. The original article gave no indication 2FA was anything but mandatory.