When the service shuts down, all users will be required to go through the password recovery process, which is often weak. Come the think of it, that might be a

When the service shuts down, all users will be required to go through the password recovery process, which is often weak. Come the think of it, that might be a good thought exercise for evaluating the strength of your account recovery procedure. "Imagine it becomes impossible to verify account passwords (hashes lost, 3rd-party service shut down, etc.), how would you recover? Are users in danger of being permanently locked out? Are accounts in danger of being stolen?"