I have this situation, my friend is hacked by someone he had a fight with a player. After weeks my friend acount was hacked by that person maybe he report it to the developers and ask for a pass and email. But when you had an other pin for changing password or email that reqyired for the request, that suits a barrier for a person who wants to hack your account. Even if other person can hack your pass and email but did not know about your scret pin he cant touch or change anything in your account.