Ask HN: Why is the current user verification process so bad?

Story: so I tried to login to my bank account via selenium just _once_. After being unsuccessful, I go back to login as normal, and have to change my entire password and verify my account via email.

But that's just my bank.

Accessing Linkedin on a different computer? Gonna need to dig out your old email address password to get the code from that account verification email they just sent.

And god absolutely forbid you should be accessing a Google service from a different/unfamiliar machine. If you don't have a number on file with them (lol), or haven't updated your recovery email in a while, you're legit locked out.

Granted this is a bit of a rant, but why on earth is account verification in this, the year 2020 just such a paranoid, terrible user experience where every company takes an uncreative, heavy-handed approach to identity verification?