Considering the "forgot password" fallback for virtually every site is your email address, and you can't disable it, most websites are only as secure as your em

Considering the "forgot password" fallback for virtually every site is your email address, and you can't disable it, most websites are only as secure as your email security.