This is why a lot of services have just moved to using email with magic links to log people in.

In the end for a lot of services controlling your email is defacto controlling the login.