Is it possible to offer password recovery using just the email address? And, switch off the option for Username recovery?
Yes, but only if you stop using username for login. You'd have to change the login method in CB > Configuration > General to email address.
We'll be redesigning the forgot login behavior in the future. Ideally we won't need one at all anymore and can just use Joomla's.