Wouldn't using a registered email address be the optimal way to go for Steemit account recoveries?
In addition Steemit should implement some sort of confirmation email that has to be acknowledged if a user wants to transfer SD or SP out of the account. This would ensure that not only does the hacker need to compromise a users Steemit ID/Password combination but they also need to compromise a users 2FA protected email account. This would prevent 99% of all thefts. Not hard to implement and very secure, it is considered an industry best practice.
to the best of your knowledge is anything like that being planned? With Steemits explosion in the last 2 weeks there are some significant funds to protect.
Curious why this is not the direction Steemit went since its an industry standard and works very well.