When you accept that some customers will lock themselves out of their account and you permit an alternative pathway back in, you also accept situations like the

When you accept that some customers will lock themselves out of their account and you permit an alternative pathway back in, you also accept situations like these. There are lots of situations where the person who's managing vs paying are different; lots of situations where a web resource that's being managed is so important that no single person should have complete power. That's why Cloudflare provides extra security for those who don't think the convenience of getting back into their account is worth what's essentially a social backdoor.