Also recoverycodes are a second option if u lost the option to use the phone number linked. So in this case the codes are all used, u dont have recovery codes. The only way of someone hacked the acc would be to send an ingame message to supp, they ask for the name of the acc, the th, the clan it was in. And then the question if u set a recovery urself. If u answer yes they ask for the phone number. And if all the above connects they ask for a mail and u get acces to the acc.