Imho, the main problem with this is people gaining the accounts, then using them to reset account passwords for services that are not dormant. For example, I us

Imho, the main problem with this is people gaining the accounts, then using them to reset account passwords for services that are not dormant. For example, I use a @msn.com password for my facebook - I haven't used that email address in years, and haven't checked it in months. If microsoft announced something similar tomorrow, I would be totally screwed unless I can access the msn.com address, as facebook doesn't allow you to change email addresses. This isn't a huge problem for me, as I try to keep up with tech news, but imagine that I'm not subscribed to hacker news, and don't realise what's about to happen to my account, in that case there's no possible way for me to rescue my email in time, and every account I've used it for is compromised.