In reply to Bjørn Johansen.

Good lesson for blogs to require 2FA on accounts with publishing privileges.