I agree on "Don't turn off the email notifications of your wallets".
Yeah agree with you. with email notifications you can know if there is something like a withdraw request that you do not do. so you can directly do cancel and change the password.
if you can you can add a notification to the cell.
Email verification can be easily bypassed if the hacker have an access to your email and i'm sure those hacker get your wallet ID from your email,sms verification is really reccommended