The problem with that is that if the user loses their key, their account is no longer recoverable. As things are with ADP, enabling it comes with a bunch of warnings about that, and IIRC it also forces you to print out the recovery key for safe storage.