If this problem is so widespread and prevalent as to have an automated recovery system in place, how on earth has Blizzard not devised a better way to keep your account secure? Yes, they have an optional 'authenticator' which sends a secret code to your phone to login like you're working at the CIA, but who thought you'd need a security measure like that? I hadn't even heard of it for D3 until after the hack took place, and though I know authenticators exist, I've been just fine without one for literally every other account I've ever had from email to banking to every other video game I own.
But that begs the question, why the hell does this happen in the first place?
