On: Gmail 2FA causes the homeless to permanently lose access 3 times a year

[lazyasciiart]

Many people exist and use email before becoming homeless. When that email is gmail - they actually do have to use it when they become homeless!

[renewiltord → lazyasciiart]

I think if you trolley-problem this you'll still end up with Google's choice being the right one.

[lazyasciiart → renewiltord]

I did and I don’t. Absolutely depends on the value and risk weighting you give to homeless people needing their email, of course.

[samdcbu → lazyasciiart]

Based on Google documentation you can still turn off 2fa, so we are weighing the account security of the hundreds of millions of users who would never turn on 2fa but really should, versus the people who lose their 2FA verification method and are locked out of their account. Maybe the harm of not being able to login is worse than having your identity stolen but whose to say.