ZacharyLiu - on recovering without the face scan: tonnyy and wertos are guessing at detection internals, which none of us can verify, but the recovery options themselves are documented, so it is worth working from those instead.
From Meta's Help Center: if you think the account was hacked, start their hacked-account recovery flow, and do it on a device you have used to log into Facebook before - that detail is in their guidance, and a familiar device is part of how they recognize the account belongs to you. If you still control the email or phone on the account, reset the password directly. Since the hacker changed yours and the "was this you?" window was missed, your case is the one Meta has a separate path for: recovering when you no longer have access to the account's email or phone. Meta also documents ID upload as one of the ways it can ask you to confirm identity, so a video selfie is not the only identity proof in their system.
Whether you get offered any of these instead of the selfie, nobody here can say - the flow decides per case. But those are the documented paths, and they fit your situation better than waiting on a report. If you do get back in, change the password and re-do two-factor, since they changed yours.
