[gejjaxxita]

2FA wouldn't have necessarily solved this, if the hackers had access to an engineer's ssh keypair (e.g stolen laptop) they could clone repos as they pleased. 2FA isn't a silver bullet.

[ihattendorf]

Could use a Yubikey (or similar) for SSH access.