Atualização do hacker

Okay, I activated the authenticator with a code to make SURE there was no danger of the guy getting into the account again and believe it or not... He contacted support pretending to be me to deactivate the authenticator AND HE SUCCEEDED!!!! Luckily I had my phone in my hand and received the email about it. Well, now I've already put it back in and changed the email once again. I sent an email to Roblox alerting them and put all my information there but I keep wondering how easy it must be for the hacker to get the account back in these cases... I mean, what if I didn't have my phone in my hand?