A reminder to check your inactive account passwords

"... the more emails I get from Meta about attempted password recovery, attempted logins or general signs of someone trying to crack my account."

and of course that kind of thing just increases your surface area for responding to some phishing email which looks exactly the same as the kind of email you describe. It's a case for a hard delete with double prejudice and block rules in your email server.