Crazy things are still happening here And people seem to go untouched.

You're right about that. It's safe to say if you don't trust people, don't let them create an account for you. This is sad

the part that worries me is the recovery account. if the account that created yours is still set as recovery, changing keys alone may not be enough, so people should check that setting too

I was going through a post today about an account who got their HBD, HIVE and other tokens stolen from them through what looks like an orchestrated scam by INLEO. So basically this is not about clicking