Banks and utility companies aren't an uncommon one. When your method of account recovery is email, it's far more trustworthy to trust a major email provider tha

Banks and utility companies aren't an uncommon one. When your method of account recovery is email, it's far more trustworthy to trust a major email provider than it is to trust Joe Schmoe running his mailserver at home to keep it secure, or to trust that someone isn't going to be abusive. Example: scorned employee or spouse, they redirect or copy email to x address, and they gain access to accounts via that. "That could never happen." It's happened plenty of times that it's a consideration for a lot of major institutions, and it's happened enough that the radio and bus stops in the UK have ads warning people of the signs of financial abuse. That's without even getting into people not having automatic renewal set on their domain and losing the domain.