How hard is codewars, None of the compromised accounts had 2FA turned on