Account recovery (forgot password) doesn't actually require human or Ai in the loop?

I mean this particular auth flow has been a well-known pattern, even before Ai came along.

I guess the only way they got away with this is due to the Ai in the loop. They kind of social (artificial) engineered the Ai, which prolly overlooked the well-known password recovery pattern.