They do in fact do that (or something like it) when you need to recover an account/password.