Programmatically check whether the User has a Account Recovery Emailand last updated Account Recovery Email is < 90 days?
YES
NO