On: Yes, I was hacked. Hard.

[MiguelHudnandez]

Doesn't Google fall back on SMS or a phone call if you no longer have access to the authenticator app?

I know I have a printed sheet of one-time codes, but I think if an attacker compromises the phone number on my account, I'm screwed.

[ewoutkleinsmann → MiguelHudnandez]

You can disable that, so that the one-time codes are your only backup method.