Is there anything people can do about that on the service-provider side of it, to limit account compromise via the Yahoo-email-password-reset vector? Short of s

Is there anything people can do about that on the service-provider side of it, to limit account compromise via the Yahoo-email-password-reset vector? Short of something like disabling password reset emails to Yahoo addresses, which would cause a different kind of collateral damage? I've actually run into a few services that won't accept signups from any "free webmail" provider, usually listed as Hotmail/Outlook, Yahoo, and Gmail. I suspect the reason for such policies is worries about spammy new accounts, but the risk of account lapse followed by impersonation might be another reason to favor such a policy. On the other hand, it would also lock out a number of legitimate users who use one of those services as their main or even only email.