Hey all, long time lurker, first time poster.
The other day I was talking to a friend of mine who has been playing Runescape since pre-RS3. He told me his OG account got hacked and permabanned due to RWT-- most likely because it was used by the hackers as a bot or something. I definitely trust that he did not actually participate in RWT, he loves OSRS and makes plenty of money in the real world. He told me he hadn't logged on in like two years due to being in love with Ironman mode and thinks that his inactivity probably lead to losing his account.
I'm posting to ask what I can do to help protect my accounts going forward (Main and Ironman). I dont use the authenticator because I don't like the idea of having to have my phone handy to log in (what if I lose my phone? I live in a big city, so getting mugged and your phone stolen happens frequently) . I have unique passwords on my accounts and unique passwords on my email accounts linked to the accounts, as well as a pin on my bank.
Is there anything else I can do?