Many people pleasantly surprised by so many providers having MFA.
There's a difference between @gmail.com IDs and Google Apps IDs.
What do we care about wrt/ reassignment? The asserted identifier, although we'd want to know about other things that might be reassigned (login name, email, ...)
Facebook will accept a Google login to reset the FB password, but will not accept it to login initially.