Add "do not allow mailbox password recovery" option
I don't really like how you need a recovery email to keep the strength of two passwords. Without a recovery email someone technically only needs your login password and just reset the mailbox password to access your account.
Can you please add a "Do not allow mailbox password recovery" option in the settings? For those who choose not to enter a recovery email but enjoys the security of needing 2 passes.