> This is terrible for account security

It's also terrible UX. Emails don't always arrive right away. (Especially if you've enabled greylisting.)