> 4) You can retake possession of your hacked Gmail account by providing one of the previously used passwords. No need to have a working phone.

That's possible?! I only ever change password if I suspect it might have been compromised. Now if a service allows to use old passwords, that's quite a bummer and makes password change meaningless.