You are failing to read the "thoroughly discussion", the hack was just the tip of the iceberg.

Also, kernel.org was hacked because a rootkit gained access to their servers, not because they used a weak password like `upMint`, so you shouldn't compare both incidents.