Others have already pointed out that removing any "login with Twitter" access is probably a good idea right about now.

But there's a deeper lesson here: "what if the unaccountable tech company you're trusting to authenticate you goes rogue" is not a hypothetical.

It's probably a good idea to avoid using this sort of "login with _____" feature elsewhere as well.