I think they addressed this concern

Not a 100% on the specifics but by law they had to give the recovery email up which can link to you ID etc, so they advised to avoid this either use another burner as your back up email or just don’t have a recovery one.