can't believe the password reset process for our own platform still requires phone verification. like, come on, we're better than that.