Don't shift the goalpost please. We are talking about forgetting password for your email account. Now the part about attacking your email/domain: If somebody

Don't shift the goalpost please. We are talking about forgetting password for your email account. Now the part about attacking your email/domain: If somebody transfers your domain without your will you have to contact domain registry and you will get it back after a bit of back and forth. It happens, noting new here. Unless you register .eu domain - there is a whole institution dealing with that and there is no easy and quick way to transfer the domain in a stealth way + long grace periods and better authorization so its much harder to even try to do that. Compare that to Google - your account gets locked or even worse somebody gains access to your email and that's it. Your not getting it back.