They have a large number of users and it would be very strange if such things did not exist. Earlier, I had a similar "bad" experience with them, I got the impression that their security was not very well done.
Of course, there is 2fa there as an additional security method, it should be activated.

I wouldn't trust them with more than $100

He went online today.
Another worrying thing is, till January he was making posts non-stop. Then zero posts made in February and one post was made in March and one in April. This strengthens my theory but let's hear his explanation first.