The standard defence against account takeover is a verified email plus a user who clicks confirm. EMA gives you neither. Here is what to key on when nobody is there.
Enterprise-Managed Authorization: Account linking with no user
calendar_today
September 21, 2026
domain
workos