.. can't those old accounts be flagged to require email verification to log in ?
Yeah I know there's the whole genetic disorder screening thing which might receive more updates in the future, but I think most of their customers probably did this for the novelty of knowing where they came from.
I mean, 23andme has one of the ultimate methods of account recovery available to it. (ignoring that people tend to leave copies of their DNA everywhere, but then you could just mail that in under a John Doe and find out all the same info anyway).
While I get the social media aspects of 23andme, if one can get your DNA, they could submit that to 23andme and find out everything you already knew.
I wonder how they handle duplicate submissions?