Agree with you another option we can take to increase security is that we can login through two factor generation code through OTP or SMS. As we can see when we go to make transactions in different crypto exchange wallets. There are many people who have lost their PDF password and lost their account. If the system of mail verification and mobile verification were simpler then there would not be so much fear about it. Very well written, best wishes for you.