I've been hacked, they disabled my 2fa (no coins stolen)

Yesterday my gmail got hacked (I have 2fa enabled). I think my browser session got hijacked (including my credentials in firefox) or they got remote access. From there they were trying to get into my Binance (credentials also in firefox). They succeeded in disabling my 2fa because they had access to my email. The filed a "Request to Reset Security Items" . From there they were able to disable my Binance 2fa and login to my account.

What's the point of 2fa if you can simply disable it trough a request by mail? I lost my 2fa a few years ago. Back then the only way to restore it was trough there helpdesk. Isn't this better for security?

Fortunately for me I have a ledger and always transfer my coins to the ledger after trading. So no coins were stolen.