In addition to what you listed, I think the article's point about one's password being findable in their mailfile is a great catch. In order to be aware that s

In addition to what you listed, I think the article's point about one's password being findable in their mailfile is a great catch. In order to be aware that someone has compromised your mail, it's essential that they not be able to reset your password to its old value. Therefore, your password for e-mail should never be findable in your mailfile, nor should it be the same password you use for any other web service. Because you never know what stupid web service will send your password to you in cleartext upon request. Of course, it's not a good idea to share passwords among different services in general, but keeping your mail password separate is particularly important.