There still is a standard password recovery flow with mail/capability URL that is reasonably safe and hasn't changed too much in a decade. It is the bullshit s

There still is a standard password recovery flow with mail/capability URL that is reasonably safe and hasn't changed too much in a decade. It is the bullshit some security advisories brought us that introduced new dangers. By sharing telephone numbers for example... These threats are also worse than losing an account in many cases, because now the data can easily be correlated, which has proliferated through a lot of 2FA bullshit.