You can't possibly be unaware that Square Enix had a data breach that exposed 1.8 million accounts data a while back, right?
It also wasn't until April this year that they finally let people use a proper authentication app, and a lot hadn't had it set up for that reason. That doesn't change that someone else shouldn't be able to add it to their account without an authentication email. That's Square's pattern of repeated bad security.
They've also allowed accounts to be social engineered like this one
https://www.reddit.com/r/ffxiv/comme...eleted_square/
Look at what you're going through to white knight a company valued at billions of dollars and to defend their bad security at the expense of attacking others. Look at all the assumptions you're making to do that, too. You also ignored the other examples I gave in the OP since they're inconvenient to your attacks.
Their security and customer services are indefensibly bad, yet you go through hoops and attacks on other people to defend them anyway.