Recover key from google account

[xiangjianmeng]

Describe the bug Keplr wallet integrate the totor.us to support importing account through sign in with google.

I learn abount that totor.us protects user's private by spliting it to 3 shares, and private key could be restored on another device after any 2 of 3 shares are verified successfully.

But now I could restore my private key only after verifying Google login. If so, I think any one who steal my google account can recover the private key and spend my crypto assests.

To Reproduce

Expected behavior

Screenshots

Device details (please complete the following information):

Additional context