Sort:  

2FA utilising PGP trumps EVERYTHING

They will according to the latest update:

"After successfully containing the hacker on the evening of July 14, today we temporarily took down Steemit.com to mitigate a DDOS attack. The silver lining is that this timeout allows us to begin implementing an advanced security protocol, which includes the deployment of blockchain-based multi-factor authentication. As the website is being upgraded, all user accounts and tokens are secure."

Totally agrees this...we are all over other sites that holds our funds using ONE password and 2FA , they are secure. But what about 100% secure site? . We'll never know about that utopia.