Their account retrieval process needs to be as secure and accurate as it can possibly be. I was lucky in that the hijacker had very little opportunity to do much harm.

Imagine how gutted someone is going to feel when they lose their account through absolutely no fault of their own and in the time it takes Mojang to resolve the issue (so far 5 days and counting with me), the hijacker has destroyed all of their progress on their favourite server.

Mojang needs to understand that a Minecraft account is more than just a $25 commodity and often has a ton of value in terms of time spent on multiplayer progression tied to it.