There is a feature called “ Google Activity ” in everyone’s google account which tracks and stores all your data history, things searched for, places visited, contacts, and lot more…

If a hacker tries to retrieve your google account by using forget password, he/she would be prompted for a ۲FA Verification which would be a ۶-digit-code that would be sent as SMS.