It never ceases to amaze me how trivial it is to get temporary control over a phone number, or that given how trivial it is that anyone trusts it for any kind of verification, and so as hilarious it is that the SEC didn't have 2FA set up, it's rather rich for X to claim it's nothing to do with them when they choose to trust a demonstrably unreliable method of proving ownership....