My team built out the workflow and tooling to support some thorny account recovery scenarios and assist Support: https://github.blog/changelog/2019-12-13-2fa-lockout-recovery-workflow/