Quoted on why enabling multi-factor authentication remains the single highest-impact action individuals can take against credential-based attacks.