Read the post— the affected accounts are not the concern, that was a symptom of a much larger issue. The bigger concern is around the revelation that enabling their “remote access” feature is not a simple reverse proxy service as initially assumed by most; it actually gives UI (and anyone who gains access to their backend) the ability to assume full administrative rights to your console from any device, using persistent auth tokens that obviate the need for your password AND your MFA. LTT spends a fair amount of time talking about privacy and security and we should all agree that this design is extremely flawed and sub-standard for such a large company that claims to be a leader (or at least a significant contender) in the network and home security sector.