Feels like too many owners. Each step makes sense, but the whole thing doesn’t.

You should see the account recovery workflows.