Yeah that’s true. Still pretty bad, though, right? What if the service requires you to 2F confirm an existing auth to change auth settings (to add another login

Yeah that’s true. Still pretty bad, though, right? What if the service requires you to 2F confirm an existing auth to change auth settings (to add another login if you are locked out of your email)?