tbh I think that's basically reasonable for corporate-controlled accounts. They can verify that you are you, and recover the account (or get you a new equivalen

tbh I think that's basically reasonable for corporate-controlled accounts. They can verify that you are you, and recover the account (or get you a new equivalent one) pretty much no matter what you screw up. It might take a couple days, but it'll happen eventually. Individuals do not have that kind of power over their own accounts. So if you screw up, you're screwed for good. 2FA means third parties can screw me over at any time, I see no reason to take that increased risk.