Most sites have a forgotten password feature so an attacker can gain access if they have access to your email. Some sites don't store passwords very well. So

Most sites have a forgotten password feature so an attacker can gain access if they have access to your email. Some sites don't store passwords very well. So SSO is a good choice when offered and gives you the ability to revoke sites.