Texting a password recovery link to a customer presents the risk of someone else taking over the account. Researchers found ...