I know this doesn't help, but I genuinely trust Runemate's account integrity more than Jagex. I mean, Jagex had that staff member logging in and stealing from accounts, Runemate hasn't.
There's lots of potential ways your account could have been stolen that weren't Runemate. Phishing, fake ads...