There are two wolves inside of login pages. One asks you for 3-factor authentication (where all factors are actually your phone) and the other is an LLM that will change your recovery email if you ask convincingly enough
@fay59 even better if the service does not let you change your email address at all normally, but the dipshit LLM can do it