[aeonik]

Step 1: Update your password.

Step 2: Use non-SMS 2FA.

Step 3: Handcuff yourself to the Google Play Store forever, for your safety of course.

[e40]

A yubikey is even better. Mail accounts are so incredibly important these days.