It tries quite hard not to. A signed-in administrator is never locked out whatever the settings say, the address you switched it on from is trusted automatically, and the recovery link works from anywhere.
The one setting that genuinely catches people is moving the sign-in page, which is why it is off until you switch it on. If you do, save the new address somewhere other than the site.
Still stuck? Ask the developers who wrote it. We aim to reply within one business day.
