A better takeaway is to use a better registrar with good security.

I almost lost an old @gmail.com address when they asked me to verify a really old phone number for no reason. Never trusted them again.