I recovered the account pretty fast even with authenticator. GM removed it immediately when he reset pw after asking if I had control of my email account again. It's one more step, but not hard for GMs to remove. They should have to answer the secret question to add it though...