That’s absolutely flat out wrong and honestly concerning.
For a start nicotine addiction (vaping) has not been proven to have any long term health strain on the medical system. To say having a gambling problem is better is just crazy.
You realise the difference between nicotine addiction and gambling addiction right?
That’s not 23 and me fault at all then. Basically boils down to password reuse. All i would say is they should have provided 2fa if they didn’t.