Istg there is a whole another world out there. You can do this with almost any service, this is how streamers etc. have their accounts compromised, social engineering is so common
So it turns out someone can access your account by knowing your email, username and a recent purchase plus a high enough charm stat to get past the support staff.