My mom’s Facebook account got hacked twice in 3 weeks. The second attack came after we turned on SMS-based 2FA and gave her a strong password. Apparently that’s not enough protection! We just enabled “real” 2FA authentication with Authy.com. You should do the same, with Authy or Google Authenticator on all of your important accounts!
Update 6-20-22: Oh my! There is apparently a secondary market for scammers! My post on Facebook about getting locked out of Facebook lured some 17 scammers to post on my Facebook feed telling me to call them so they can fix my account.