I wonder if this could lead to an open invitation for people to hack into accounts based on services that use your email address as a primary key for your ident

I wonder if this could lead to an open invitation for people to hack into accounts based on services that use your email address as a primary key for your identity. e.g. Joe Public hasn't logged into joe.public@yahoo.com for a year because he has taken a year off to live in a Buddhist monastery. So Eve goes in and signs up for that address, without any malicious intent. Fast forward to a week later, when Eve signs up for CatNip, a website for sharing cat pictures. It says "You are already signed up for this service. Click here to send a password reset link to your email!" Eve can't resist the allure, and clicks through. One click later, Eve has access to all of Joe Public's cat pictures on CatNip. (Even though she didn't really sign up for the address with the express intention of getting them.)