Account security rests with us. It's why we need a secure email account tied to our characters. It's recommended to have a 2 step verification email address like the type that google uses with G-Mail.
On top of that Authenticator is also a great tool to have enabled on your account as then a hijacker needs your code that changes every minute to access your character.
It's worth noting that all security measures Jagex can provide are tied to our email addresses so if we are lax in our email security then yes our accounts are in jeopardy cause requests to disable anything or password changes all take place in our registered email addresses.
As this is certainly not a compliment it's been locked.~Tranq~
Reaping another soul from the ambient mortality