Security is always porous. The article really had no suggestions really. They say 2FA but account recovery is often a combination of access to you email account or questions. None of this stuff is particularly secure.