Everyone I know whose had a compromised account on the major social platforms never got it back no matter how hard they tried. Having a non-rotating key is important. if my key is compromised no bad actor can stop me from going in and posting "This account is compromised". they're complaining about something even X/Facebook/insta doesn't do well at. At least here once you find out you have a way Forward that doesn't include all your friends and family getting scammed.