Got some random requests to sign into my Google account, so locked it down a little better this morning. No more SMS verification, 2-factor via authenticator app, new password. I’m not super paranoid but I think I need to do that for more services.