Single post in Account Breach incident

For the VPN thing, what's stopping them from creating a new account with a different email/fake birthday/whatever and starting again? Sorry, this has me really paranoid (even though I probably wouldn't be affected because I never really go completely inactive?) To the people saying 2FA should be connected to phones, what about people like myself who don't have phones? Fine if it's optional but what if it's not? I understand the concern but to me this all seems a little excessive for a clicking game site. And yes I know real money is traded sometimes (and I hope RMT doesn't get disallowed because I'm thinking I may be forced to sell some of my melans soon haha). idk I guess I'm just confused and kinda overwhelmed over why someone would even get the idea to do something so evil on a frikkin' pokemon game :/