|
Bill, I agree with what you wrote, and I would add that based on my experience I suspect there are large numbers of O 365 and G Suite accounts that do not enforce 2FA in the first place, and probably have IMAP enabled by default to allow users to easily hook up their smartphone apps or else the IT department will spend all day every day helping users set up their phones. I have found it is very hard to get people to take ordinary precautions with their work email accounts, and most people use horrible passwords and the minimal security allowed. I know personally an office that requires everyone to use the same passwords for most important systems, and they are not good passwords. Maybe we should require teaching a bit of IT security in schools--it is a basic skill required to live in the world today.
|