This is exactly how credential reset works on every system with registered backup email address, include Google.
The only risk is if they send the key to the wrong email address, such as From and Reply-To.
You’re sending them your public key, not receiving a private key.
This is exactly how credential reset works on every system with registered backup email address, include Google.
The only risk is if they send the key to the wrong email address, such as From and Reply-To.