Personally I'm frustrated how most companies followed the lead of the likes of Google, and effectively tied security of your account on their website to that of

Personally I'm frustrated how most companies followed the lead of the likes of Google, and effectively tied security of your account on their website to that of your email. If you control the email address signed up with, you have "god" access to the account (can perform password resets, etc). They essentially outsourced security to your email provider. But some of us would prefer to keep more separation between their email accounts and other services. Eg. If my email's hacked, I don't want that to pwn my other stuff. 2FA helps but often there are ways around it if you control the email account.