[berberich]

They've had two-step authentication since March of 2013: http://support.apple.com/kb/ht5570

[ja27]

Except the article seems to be saying that Apple's two-factor auth isn't required to access iCloud backups and that it only protects account details, payment methods, etc.

[IBM]

Adding two-factor gets rid of the security questions and would have prevented them from getting the password though.

[deanclatworthy]

Only available in certain countries though. Mine being one that isn't yet available (Finland).

[__e]

Their FAQ says it's available in Finland