@schizanon There are a couple of exceptions - usually opt-in (like Google's Advanced Protection Program - they make you register a minimum of two security keys, and require active Google intervention to recover if you lock yourself out.)