The reverse compromise, where the email is hacked would require exactly that though. It's not a problem with one solution. It's many problems that require a human point of contact.
Also the other commenter is right about victim blaming. The notification about a suspicious login should give appropriate options to safeguard one's account from a takeover.
Last week wife got an email that her Facebook was logged into. Told her to open app and change password immediately.
Too late. Account email and phone number already changed. No way to use old ones to get control back.
15 year old account with a huge amount of memories gone.
Best possible was to indicate a problem, so account is disabled. But no way to use it anymore.
Apparently this has happened to around half of her cohorts. It’s now part of life to just make new accounts periodically.
Utterly shocking that account email and phone can be changed in 20 minutes and no way to change them back.