Ask HN: How can I further secure my Facebook after two hacks?

I've had a takeover of my personal Facebook twice this week. I get email notifications that the person has changed the email to an outlook address (Same one both times), despite their IP being in Vietnam, then Australia, then Bulgaria, so presume a VPN or something.

I had a unique password. It's not on any haveibeenpwned lists. I had 2FA through Authy.

I had to submit photo ID to facebook to prove it was me and got it back, and am in the process of doing this again.

I'd changed to a new 2fa tool AND switched my password to a new unique one. I checked all apps, posts, messages, and forced sign out of every facebook device that facebook had registered for me back to 2014.

I don't care too much about my personal one, but I do need it as I have access to a few business pages which is more worrisome.

Clearly my previous steps weren't enough. Maybe they have an exploit, maybe I've missed something. In the hope I get back in this time, what else can I turn on to try and increase security?