My kid got his 5 year old account hacked in Feb. Roblox didn't give a shit. They kept saying to start a new account, and turn on multi-factor auth. That account already had all that. They hacked him via the multi-factor mechanism! Gave them more details, not enough. They eventually just ignored me. Thousands of dollars over those 5 years. Either way, both my kids are done with the shit platform anyway. The new rules made them hate it anyway.
It's not just collectibles either. Premium was active on the account, and he had a few private server passes that had a pretty high one time fee. The worst.