My account taken over while I had 2FA activated and I never received any emails about suspicious transactions besides the support. Doesn't seem right. But I will definitely change the password once I get it back.