TL;DR:

1. Find the username you want to hack.
2. Connect to a VPN that's near the physical location of the target account (e.g. Washington D.C. for a US congressperson)
3. Use the AI support to claim the account is hacked and to send a password reset to an email address of your choice (the AI didn't check)

• the support claim automatically invalidates Two factor, so no need to worry