Comment by BrandonLive

You are confusing two different things.

The problem is one factor account recovery, because it means you have one factor auth.