I'm a bit out of the loop so sorry if this has already been solved or mentioned in a previous explanation. Will this fix the problem that, if a malicious actor knows your email ID used to log in to RS, they can effectively stop you from ever logging in by spamming login attempts to freeze your account?
This issue should already be solved by switching to the Launcher and anyone that continues to have that problem should switch to the Jagex Launcher even if they aren't eligible for a Jagex Account yet to prevent that issue.