Jagex acc RSN transfer

Is it safe to allow a middleman/name seller to transfer rsns on a jagex account? From my understanding, if someone has access to the backup code they can still login into the account without 2FA until they get replaced. Could someone takeover a jagex account with only the backup codes/login?

 

yes u still have email control. whoever has email control ultimately has ownership of the jagex account. only let login with codes, change them later / generate new ones along with changing your jagex acc password