All systems are exploitable given enough time and effort. At that point they may as well just"hack" the actual account owners email. In cases like that you'd s

All systems are exploitable given enough time and effort. At that point they may as well just"hack" the actual account owners email. In cases like that you'd set set the time window to be longer than you expect to be off the grid. Granted it is a slightly larger attack surface but it relies on 1) knowing the heir (wife, parent, child, friend) 2) gaining access to their email 3) Relying on the original owner having an inadequate time window 4) the owner going somewhere they are completely cut off from the world. It could happen, but that's a vanishingly small opportunity.