There is no excuse for not allowing your site to be functional without cookies. It's due to one of two things: bad/lazy developers or nefarious anti-privacy analytics.

Based on the fact that they were "hacked" recently, I'm guessing it's the former, but who knows anymore.