Two disruptions survived, ~394,000 machines. Takedowns remove infrastructure; the code, operators and customer base persist.
A stolen password is defeated by a second factor. A stolen session cookie is the second factor already satisfied.