If you have a hardware security passkey like Yubikey as the only way to access the account and NO recovery phone or email, ONLY just backup codes secured locally, I feel like this wouldn’t be an issue anyways. I recently had someone try to use my old but still lightly active gmail to order Chipotle. I knew they couldn’t have access to my email though because only I have the Yubikey passkeys to get in.