> This is already the case right now. An attacker who has access to your primary email account can gain access to any of your accounts using Forgot Password.

> This is already the case right now. An attacker who has access to your primary email account can gain access to any of your accounts using Forgot Password. This is not the case when using two factor authentication.