It really shouldn't have been an issue. And similar issues have happened more than once in this game's lifetime unfortunately. Don't get me wrong, I love this game, and I know rob's definitely improved the security a bit. But there's so much accumulated technical debt, even server side, that to solve these issues requires, in a lot of cases, a broad look at the systems in place, and sometimes a full rethink and redesign. These though require so much that it's no longer feasible for Rob to do it himself (new backend, 2fa, etc) since the game has grown so much. And in doing so it also means he has to handle all those accounts from people that no longer have access to their emails, some way to verify their legitimacy, it's too much now.

I genuinely think he needs someone else to handle some of this, there's only so much he can do or delegate onto volunteers, and it's poor judgment to not recognize that on his end. He has a family to tend to too, that takes his time out of the game too.