Your account being compromised doesn't necessarily mean your password was compromised. Attackers are constantly developing new ways of accessing people's accounts. There's no valid reason to assume that there was an "elaborate hack of Twitter." Even people who are very careful, as it sounds like you are, can be successfully targeted. I don't know if turning on 2FA would have prevented this, but it sure wouldn't have hurt.