It's a good callout and I think these things should be documented just so security researchers can expose flaws in the process publicly. Basically, these compa

It's a good callout and I think these things should be documented just so security researchers can expose flaws in the process publicly. Basically, these companies have unlock keys for our accounts and we don't know enough about their internal processes to know how secure we are from social engineering attacks or internal threats.