I'm sorry to hear that happened. I'm not totally sure how a recovery account can hack you, but there is plenty I don't know. I expect many account will still have it set to steemit or whoever created their account. It needs to be someone you trust. We did not always have tools like Keychain so we used to have to actually enter our keys into web sites. I saw some ask for the master key and they definitely should not need that.
I hope you can rebuild on Hive.
!BEER
Thanks Steve... it wasn't the recovery account that hacked me...the hackers ETHBOYZ, changed my recovery account so they could have total control over my account.