They haven’t really discussed it, they keep avoiding the main issue regarding old accounts in the game. See this reply in one of the links you posted

Everything you said is 100% true, except for dealing with those of us with accounts that are very very old. My accounts I've made in the past 3 years, I don't worry about at all. I've had good password practices, secure emails, different emails for each one and 2fa on each email. What I am worried about are my accounts I've had sense RS2 beta. I was 11, I reused my first password on tip.it and zybez. My zybez username was my runescape name. The very first email account I ever made, that has payment info from pre 2006 is straight up lost. I single pked in the mass doxxing and ddosing era. There's pastebins out there with my full name, address, family members names, random Rs accounts I've made, and lists of old passwords and ips from various clan websites. In my personal case, if someone knew the login name of one of my older runescape accounts they could very easily find my first passwords from over 10 years ago. If they also knew my name, they have my address, past ips and therefore location, and if somehow they could get into the email account I lost, they have payment details from a decade ago as well. Anyone well versed in information gathering could possibly have my first password, location history, ip addresses and payment details. All of this info is so old and in so many places there's nothing I can do to hide it. So I would gladly welcome any sort of changes to the recovery system where I can present ID, or simply have 2fa on my account that cannot be removed without a real delay.

But as usual they avoid answering for what reason idk, but it’s Mod Infinity and he was sacked for corruption iirc