Potential cause: many people sync their 2FA to the cloud. On Android this is even the default 😖, not sure about iOS. As a result, your cloud account becomes the weakest link and a hacker only needs access to that in order to gain access to all your accounts, including 2FA.

An alternative is X staff messing around. Their security and customer support staff have been slashed in the name of "efficiency"

Best long term fix: ditch X, embrace nostro