@SwiftOnSecurity for T-Mobile USA users: enable the free Takeover Protection add-on in your T-Mobile account. While they don't specify what exact measures that activates, it has to be more secure than the default that allows a call to customer service to do anything the attacker wants.

As always, make sure you have a strong password, a PIN, and randomly generated security answers stored in your trusted password manager.