The self-trustee example is the one that should worry people most. If the compromised account is also its own recovery trustee, there is no way back — you cannot log in to send the recovery payload. I wonder how many older accounts are still sitting on a default trustee they have never checked since signup. Is PeakD's settings page the fastest place to verify it, or do you recommend people cross-check on another frontend as well?