as always, the result of more security without taking into account real-life human behaviour, only leads to less security overall as people will just use services that don't have this behaviour and always allow getting back your account