Feel for the guy. I had a couple of long owned domains stolen recently. They were so low value to anyone but me though, it makes me wonder why someone would bother.
Newly registered domains don't get the same recognition in search engines as older ones. That's why there's a market for stolen domains, the same is true for social media accounts
Well it was partly my fault for letting a seperate domain expire: someone grabbed it up and started an email with my old address. That old email was the contact for the stolen domain-they seem to have used it to have the password reset, locking me out. I still have the phone I used for 2FA and Godaddy is supposedly investigating, but it's been months and I've pretty much given up hope. They email every 3 days to tell me they haven't got a chance to look into it yet...