Good thing you used two-factor authentication!
Bitcoin-related sites, as a rule, should offer TFA.
Yea, I'm thinking it should be a requirement to start an account with all these sites. I know it's the early days and better security will be coming in the future but right now, it's the wild west out there. Can't take any chances. Especially when nobody is really offering insurance right now.