There are obvious flaws in the Telegram account recovery process. The current design requires users to obtain a verification code from their own TG account to regain access — but this overlooks a real issue: what to do if the phone is lost or stolen?

Users cannot get any verification codes from a device that is already out of control. What does this mean? It means that once the device encounters a problem, the account is completely locked out, and even the rightful owner cannot recover it.

A more reasonable solution should be that the phone number and email address are sufficient for identity verification and account recovery. These two pieces of information are relatively stable and easier to keep safe for most users — unlike a phone, which is more easily lost or stolen. Why not consider this alternative approach?