The impression I got was that it was nothing more serious than an identity authentication scheme, not an encryption mechanism... they don't need to "escrow the

The impression I got was that it was nothing more serious than an identity authentication scheme, not an encryption mechanism... they don't need to "escrow the key" (nor would it matter), they'd already be able to reset your account whenever they feel like it anyways.