Hey

Unfortunately, he has to use the "Recovery" option. Once he fills out the security form, the game will send him a new password to the bound email.

Bound email can not be changed.

I'm quite confident there's no limit restriction to recovery.

If your friend supplies the correct information and the system approves, he'll be sent a new password to the email (bound) that he registered with.

Of course.

You may change password as frequently as you wish.

Of course, only if there's clear cut evidence. Due note that we advise players to not share account information because the responsibility is the owners and the owners themselves.