From Google, on the importance of having a recovery number and 2FA enabled on your accounts.

https://security.googleblog.com/2019/05/new-research-how-effective-is-basic.html?m=1