Just figured using an in-house account (one other than steemit if you want split security), to perform the account creation would be wisest since that account would be the recovery-account.
I haven't had to utilize the recover-account so maybe there is a way to change it that I haven't ran into yet. Still seems a little interesting. Makes it where the relation to SteemIt is assumed but not known as fact.
I understand the use of the multiple accounts, though. It is indeed added security.