Who said anything about an attack?
Never bother arguing with the evangelists.. its like feeding the trolls. I will voice my displeasure and vote with my wallet. I will simply use the export feature and take all my Evernote data elsewhere. If I can't find a suitable online service with 2FA I will utilize a local solution just as I did before Evernote (some support dropbox sync anyway, so yea). I mean nearly 3 years of lip service and they still haven't done 2FA... Decisions, decisions.