Exactly, if somebody hijacks ur sessions, then u wont see a new device in your "Devices List".
And with that hijacked session you are able to change whatever you want unless you have 2FA enabled. And I believe changing a group owner doesn't trigger 2FA.
Recommended Posts