[stromgo]

You have to consider the prior probability of having your account hijacked. In my case it is very low because I'm careful, but unfortunately authentication systems are one-size-fits-all and are designed for the average careless user. All I get from these systems is weakened security, disruption, and no benefits. I wish I could tell an authentication system that I will not forget my password and to not set up a recovery path using my mother's maiden name. I wish I could tell it that I'm willing to accept the risk of a hijack and to never unexpectedly lock my account because some machine learning algorithm thinks that my activity is suspicious. If anyone here works on an authentication system, then please add these settings.