I recently managed to enter into the gmail account of a girl in my class (with her consent) by only knowing her childhood hero. I guessed her gmail account name and then clicked on forgot password. I skipped a few steps until it gave me another of her email addresses which I managed to find out (@laposte.fr). I then reset the password of the laposte because I asked her what was her childhood hero.
Is there any way that Google and other email providers (Laposte etc.) could make email addresses safer? And can individuals like me help them in some way? Because it is terrifying that someone like me can get into someone's email just like that.
I ask this question to know if individuals like you and me can send feedback and ideas to big companies to try and make email addresses safer. Maybe not everybody likes using 2FA (two-factor authentification), so email providers could have security questions which are very personal to the user so he won't forget the answers and external malicious parties will not be able to answer (so if you forget your password you would have to answer correctly to all 5 personal questions, which only you can answer).