#OPSEC365 100/365 Account recovery options become attack vectors. That phone number for two-factor authentication, that backup email address, those security questions. Each one is a way back into your account if you forget your password, which means each one is also a way for attackers to take over your account. Account recovery is how most accounts get stolen. The phone number you added in 2014 for recovery is now the weakest link in every account it's attached to. Phone numbers can be SIM swapped. Backup emails can be compromised. Security questions can be researched. Consider removing recovery options you don't need and securing the ones you keep.