KD
The part I find most underinvested is that enrolling a replacement factor usually inherits the trust of the original enrolment without inheriting its verification. Plenty of organisations put real effort into identity proofing at onboarding, then hand a new factor to a voice on a phone. That is the next post in this series.