[soult]

Actually they have improved on this a lot. If you lose access to your account and your configured mail address, there are various actions (like sending bank statements, government ID, secret question/answer pair, ...) you can take to get it back. But instead of relying on a single verification method, you are required to submit at least X different proofs of identification, where X can be set by yourself (before you lose access, of course).

This is a lot better than blindly trusting that every "lost password" request is legitimate.

For more information you can check out their FAQ entry on the issue: https://members.nearlyfreespeech.net/faq?q=LostEverything#Lo...