Security descriptions are easier to evaluate when they name a specific control. A broad promise does not establish how a sign-in check or account recovery process works.

What to check
- Look for a described control.
- Separate recovery steps from sign-in steps.
- Avoid treating a marketing promise as a verified safeguard.
