Just checked my locked account now and it has registered new activity after I locked it....!

How can my account have activity after I locked the account with the URI that was sent to me and I used to lock it with?

My account was hijacked yesterday (https://bitcointalk.org/index.php?action=profile;u=94578), but I was able to lock the account seconds after I received email warning of changed password and email address of the account. This bit is fine, bu then bitcointalk is unwilling to help us in any way!

How on earth are we supposed to only have one way of proving our ownership when:

The creation of an account does not require the account to provide a BTC address.
Bitcointalk did not force account owners to update their account with a BTC address after the account breach in 2015, so their recovery could be secured.
The creation of the account does not send an email verification to activate the account and thus being the proof of ownership.
The verification request is only accepted through an PM - which in turn can only be sent if the user creates another account!

It is clear that the number of hijacked accounts is out of control and nothing is being done to close the security holes.