Man this is such a wild story and reminds me of the time my Steam account was stolen by Russian hackers, though I did get it back easily
I bought a copy of Portal 2 physically when it was new, pre-ordered from Amazon because it was $40 instead of $60 on Steam. With the photo of the code inside, I got my account back
Steam guard uh wasn't guarding much lmao