There is still some additional danger over the case where there is no recovery procedure: the risk that an attacker may be able to compromise the recovery information.
because the encrypted data is all protected by the companies existing physical security mechanisms the security risk is minimised.