The key takeaway is: we are all human. And humans are easily hackable under the right circumstances.

Your story is humbling, and a good reminder that anyone can get “got”. We shouldn’t think ourselves above such incidents.

IMO the takeaway is the author had very poor security.

You can literally tie a yubi key to your Coinbase account and no one can withdraw funds unless a yubi key is physically plugged in and pressed.

One can also use the Coinbase Vault system where it would be impossible to steal any funds from his account had he enabled it.

You should also never use cloud sync for Google Authenticator as evidence here as why.