Then opposition leader’s address was ‘dangerously obvious’ and lacked two-factor authentication, book reportedly says