I am a paid user for 4 years, trust me, they don't give a fuxk.
I have this issue for 2 years, every month got one or two login by someone else,I email them few times, they just ask me to see their Q&A.
The point is I am using two step login, still no use at all, they still don't understand how serious security problem they are in.
I will cancel subscription after finished this year service.