My gmail was hacked once in the past, got it resolved very quickly and never happened again. That was back before they had 2FA.
I wouldn't be so confident that Microsoft doesn't scan emails.
Happened to me too, they changed password and secondary email recovery option - BUT forgot to change the SMS recovery option.
Now happily on 2FA for most of my gmail accounts.