There are various reasons why a cybersecurity company can't disclose the methods and mechanisms it uses in detail. We have our users' interest in mind.
We aren't an ignorant crowd. There is limited information that you can monitor.
Password reset emails. Sure. Access suddenly being revoked. Right. Weird posts at odd times of night. I guess.
Outside of that, there is little belief that you're circumventing any sort of mechanisms at any of these providers.
No-one is running to this website because they have a secret sauce of heuristics. Nor is it stop a motivated competitor from reversing it.
Lose-lose situation.