People who care about user experience hardy ever talk to people who care about security in large organizations. That's how we end up with experiences like this.

People who care about user experience hardy ever talk to people who care about security in large organizations. That's how we end up with experiences like this. Ring (Amazon) made me call them to reset my two-factor app sync. They asked me to send a bill to the address of my home via my email as a proof that this is really me and not just someone who have my password and access to my email. I asked what's the point of this if it's not really me but it's someone who has my password, has access to my email and can go login to the utility company to get a copy of my bill after reseting my password there too? They agent literally said this is the script they have to say and they don't know...