Comment by cwillu

A required “more secure” method is less secure if it means you can be locked out by not-exactly-uncommon real-life situations.

Denial of service is a security issue.