Well yeah, but is your friend who works at <social media company> going to risk their position & salary there for some sketchy hook up that's less lucrative?
Not everyone who works for a social media company is a six-figure dev. There's a lot of underpaid helpdesk staff and even-more-underpaid "independent" contractors for whom it might be worth the risk, and they're the ones who actually have access to the account recovery tools.
