I wonder if one of the reasons for not implementing 2FA sooner was that this functionality was indirectly available if you chose to log in to Plex with a FaceBook or Google+ account.
But at what cost?
This scare should be enough for Plex to seriously consider implementing 2FA independently of third-parties providers, particularly the likes of FaceBook and Google+ that are notorious for making you opt-out rather than opt-in to their data collection services.
