I don't understand why people here are getting all hung up over the words "direct access" when it comes to Google and Facebook. At the end of the day, if they have access to email and phone records, especially SMS, then they essentially have direct access to any one of these services via the password reset feature, even if you have two factor authentication turned on.