Hi Shona. I'm Greg, 10 times awarded MVP, here to help you.
As to why it may have begun happening only recently, there has been an increase recently in account hijackings. Since they're obviously not getting through you are doing something right here and I would not change it. If you're worried about giving a response, then I'd just ignore the attempt as it will do the same thing as denying it, right? This will avoid any chance of fat-finger approving it.
As to the question of whether Microsoft Authenticator can be hacked, it seems a lot less likely with these exceptions found:
https://www.hoxhunt.com/blog/how-hackers-bypass...
https://www.yahoo.com/now/most-mobile-authentic...
https://www.transmitsecurity.com/blog/microsoft...
https://www.reddit.com/r/sysadmin/comments/oswc...
Feel free to ask back any questions. Based on the results you post back I may have other suggestions if necessary.
______________________________________________
Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.