[sfmike]

people who travel shouldn't trigger account abuse

[jeffbee]

Changing your account recovery and 2FA settings then immediately trying to recover your account from an unusual country should temporarily lock out your account, every time, and this is what all normal users want.