Yes. If someone accessed your account, they can link a social account to it and log in that way.. even if you've changed the password. So be aware of tha t& remove their linked account(s).
If someone has enough information to recover your account, you're always going to be at risk man. Add a bank pin, 2FA, and link your own social media account to strengthen your security as much as possible. GL.