Pretty lucky that the attack, while compromising tons of accounts, wasn’t more professional. A state agent could have made lots of trouble, or done things to make way more money. they could have pumped and dumped a stock, or caused a flash crash. If they were smart, they could have purchased bitcoin legitimately and then put out different tweets to drive the price higher. They could have had Elon tweet something that would have caused a Tesla short. Sort of amateurish for being so dangerous.
I've never signed up for a Twitter account, but have been meaning to, almost entirely to be able to follow @Clutch. Now I'm glad I didn't. Still might, but this is worrisome. Facebook? I genuinely have no interest in it, unlike Twitter.
That kind of access is almost the only thing that makes sense to me, but I'm no cybersecurity expert. But to simultaneously hack that many high profile public accounts. I guess the alternative is that they hacked them over a long time and kept the access squirreled away.