Recovery emails now work in two-factor authentication

When you need to verify your identity through two-factor authentication and don't receive the code at your primary email address, you can now choose to have it sent to a verified recovery email instead. This applies to the Risky 2FA flow, which triggers when additional verification is needed. You must have previously added and verified a recovery email in your account settings to use this option.