Your phone number is your identity here — which is exactly why attackers target it. Two-step verification adds a PIN that's required whenever your number is registered on a new device.
Even if someone hijacks your SIM, they can't take over your account without the PIN.
Set it up in Settings → Account → Two-step verification. Pick a PIN you'll remember, add a recovery email, and you're done in five minutes.
