Jack Dorsey's twitter account getting hacked via a SIM swap attack last year[1], should've been a wake up call for them.

The recent hack just shows how lackadisical their attitude to security is.

I used to work at FB some years ago and they had U2F for everyone, even back then. Also, regular phishing test drills and red-team exercises.

[1]: https://www.wired.com/story/jack-dorsey-twitter-hacked/