IG's security team is top-notch, but there's just not enough people.

The writing style makes it seem like there are unhashed passwords that were stolen. Very few details.

That many victims should be cause for more years than what he received in my opinion.

There are plenty of situations in which SSL-everywhere is not useful, but it doesn't mean it isn't a good idea. You have a choice to encrypt your communications, and if you choose not to, you never know who is listening. A simple Google search isn't cause to need SSL usually, but say many various searches could give people insight into what your lifestyle is, and could narrow down various facts and information about you.