Comment by netik

Lyft is not the only company that will do things like this. Twitter tried this with Twitter Digits, and Yahoo offers single-factor phone based recovery. In all of these cases, companies are sacrificing convenience for security.