I don't think that these things are connected... His HIVE password was breached (don't know how he didn't say) and the hacker converted his H-E tokens into BTC and already moved out... Don't know the rest, to be honest...
It's not a bad idea to restrict access, but that raises some other questions... Also, hackers can always shuffle new accounts, move funds, etc.
Thanks for the explanation. Yes, if he converts to BTC, then it can go in minutes...