Account recovery is a great use case. Any mission critical applications for businesses should require more than security questions or a phone call in order to gain access to accounts.

We agree that front-loading is not always the best solution and are working on systems to help firms with progressive authentication, too.