The best thing to do is turn on two-factor authentication.
Several other sites I'm on that involve money are making this mandatory.
