I don't imagine many times but it is important to cover edge cases, a black swan event of mass accounts being compromised would make this feature important. Especially in the case of the free account issuer also being the recovery account, if the issuer locks the user out later with password change and are also the recovery account, the user has no chance of getting their account back.