I'm sorry to hear that, but it's not exactly surprising and is actually a good thing from a security perspective. It's been proven again and again that account

I'm sorry to hear that, but it's not exactly surprising and is actually a good thing from a security perspective. It's been proven again and again that account recovery processes are ripe for social engineering attacks. The answer is to make sure you have backups enabled for any accounts where you setup MFA. For example with your Google account you can setup single use codes for account recovery purposes. Write these down and store them somewhere safe.