A reset link that gets sent to a secondary account that my phone doesn't have access to with a unique password stored in a PGP encrypted file with a nice long passphrase only known to me.

My security question has a gibberish answer.

Not rocket science.