Since Bitconica's account was a verified account the owner of this account asked (This happened when Zhou was still controlling Bitconica) to have his limits lifted to the maximum possible, giving the possibility to the thief to move Bitcoinica's assets to another external account (External to MtGox).
I trust they have now put the default limits in place, haven't they?
What about refusing to raise those limits at MtGox if two steps authentication isn't used?