Somebody I know of went through the same ordeal but eventually managed to get his profile back. He then called customer support and aksed if he could create like a security password or phrase so only he can access things regarding his account. Apparently, they 'were not able to do that' and his account was still as much at risk as it always has been.

It seems that M$'s security measures they have in place protecting accounts is pretty bad and I doubt things will change. I don't know myself what to do to protect my account either :/