The thing is, the moment some service allows you to recover your password through email, this becomes a legitimate pattern. As long as the throwaway password is

The thing is, the moment some service allows you to recover your password through email, this becomes a legitimate pattern. As long as the throwaway password is reasonably complex, the service becomes as secure as email can be (which is, imperfect)