2 ms·Often, Y has access to X either way, because Y is where the password reset email goes.by morsch 6y agoOften, Y has access to X either way, because Y is where the password reset email goes.jojobas 6y agoA password reset doesn't go unnoticed. A fake OAuth login very much can. I would be very surprised if no OAuth provider ever did that.morsch 6y agoThat's a good point.