Right, that is what I meant - you’re then pushing the risk to the management of that secondary protonmail or gmail account. So you basically always rely on a third party to manage the registrar account.