OK, I've been meaning to ask the HN community about this. Please share your thoughts. Wouldn't it make a lot of sense for Google (et al) to have this sort of a

OK, I've been meaning to ask the HN community about this. Please share your thoughts. Wouldn't it make a lot of sense for Google (et al) to have this sort of authentication every time you want to change your Google Accounts password? Isn't this a pretty safe way to prevent being locked out should someone gain access to your account? You may be thinking about costs, but this could easily be a premium service I would gladly pay for! For instance, I could charge $10 to my account, which should allow me plenty of password changes in the future. An intruder may "waste" at most one SMS, since he would not have it and until then Google should not send you any additional SMSs. Does it make sense? If it does, you Googlers in here, please pass it on! While we're at it... how about extending this to domain registrars? This would be even more critical. I must say it, I'm pretty paranoid and by now it clearly shows. I don't know how you guys have launched successful websites and cope with this lack of safety features. I know I'm rambling, but please speak your mind on this issue. PS: I realize things are not so bad as they could be, that probably keyloggers are rather hard to plant, etc. But it wouldn't hurt to have these features, and the companies involved would only profit, both financially and in terms of reliability.