I'm personally against anything instant cause hackers/phishers won't care about the penalty. Anything under 4 weeks (the account recovery time) would mean a great loss to many who may get their keys stolen which we've seen happen quite easily on pretty dumb tactics lately.