I agree that account recovery isn't the best. But just because that sucks doesn't mean there's zero value in improving credentials.