Well, I've lost control of accounts and I suspect a few of us have. Fortunately the one I lost wasn't important. But my response wasn't to turn off 2FA. It w

Well, I've lost control of accounts and I suspect a few of us have. Fortunately the one I lost wasn't important. But my response wasn't to turn off 2FA. It was the reverse - to turn on all forms of authentication made available, for all acccouts. If I lost control of it one way, I had another. By the by, if you read the spec, FIDO expects you to do this in preparation for the day you lose your token. So no you are not the only one - people think about it all the time.