Sorry, I didn't mean to say that TFA was the solution, but I think login info leak is one of the consequences of heartbleed, right? So my point was just, at least with TFA, the risk of having your accounts stolen is reduced.