Did you miss the part of the article where the SEC themselves removed the MFA? The SEC being complete idiots doesn't rub off on X. X isn't a source to trust that's not how it works, X is a platform.

You trust the source behind the account, and that varies based on who the account belongs to, not how many computer illiterate users got hacked. Any journalist worth their name will contact the source through official channels to confirm statements made on X.