The problem is the rapid succession of changes to recovery phone number, country, cellular provider. There is no way to differentiate, at scale, between an account takeover currently in progress that needs to be stopped immediately to minimize damage, and a legit user deciding to change all his personal info at once.
reply30 day cool down period is a reasonable response, at scale.
> The problem is the rapid succession of changes to recovery phone number, country, cellular provider.
replyAren't cellular providers inherently tied to the country they're in?
How do you move to another country without changing cellular providers at the same time?
Of course you can keep your provider. It's called roaming, per OP story: "I am travelling to the UK and did not want to have *roaming* on my Australian phone."
replyFor cheaper rates than roaming, typically you install a secondary eSIM for the country you're traveling. 99% modern phones support dual SIM for this reason
you keep the old number forever and when travelling get a data sim only
reply