No single engineer should have unlimited access to an admin panel.
Conversation
Replying to
It should be possible for users to configure barriers to support staff handing over access to their account to someone else. I've experienced this kind of account takeover via Twitter support myself and my account has still not been returned 2 years after it was stolen from me.