Account recovery is actually extremely tricky as it's very time consuming to verify that user is who he says he is. Hackers are really good at social engineering and with AI even video checks are not realiable.
The only way to make it robust is to bring it to physical life with real ID and photo/face check - that will cut out on 99.99% of abuse and impersonation attempts. The problem is that it is extremely expensive and frankly can't be funded from ad revenues.
The only way to make it robust is to bring it to physical life with real ID and photo/face check - that will cut out on 99.99% of abuse and impersonation attempts. The problem is that it is extremely expensive and frankly can't be funded from ad revenues.