Even with 2FA, Google accounts can be hacked with just a phone number
Disable SMS for 2-step and SMS for password resets and use a 2-step mobile app.<p><a href="https://support.google.com/accounts/answer/1066447" rel="nofollow">https://support.google.com/accounts/answer/1066447</a>