All those times you logged in and were prompted to verify your backup email address, and when you set up 2FA and were given recovery codes, and when given the option to sync 2FA codes to another copy of the authenticator app: This Is Why.

I'm sorry you're dealing with this - hopefully everyone else here can take it as a cautionary tale.