This seems to be par for the course for nearly all services these days. Last year an elderly family member lost control of an email address tied to a bunch of paid services. Surprisingly AOL actually offers support and helped with the account recovery, but a bunch of other services offered no help at all. The only way to cancel some services was to do a CC charge back which triggers a TOS violation and account closure.
Teaching that family member to use a password manager and 2FA is something I wouldn't wish on anyone. Ultimately with their knowledge we setup another device with all their credentials that we control to monitor notifications and emails.
