If you buy from a reputed buyer i don't think they gonna scam you like this but always stay safe. Also make sure you change the email address , keep the account under your control. 2 Factor verification is a Good move.
It doesn't matter what you do to secure the account. Whoever has access to the og email that created the account can always get it back if they want. I'm speaking from experience and I'm 100% certain. If you're buying an account, make sure you get the og email with it. Otherwise you will always be at risk for losing it.