Well, that's true of most services, right? If they have access to your email, they can just click the 'reset password' link on a site and use the resulting ema

Well, that's true of most services, right? If they have access to your email, they can just click the 'reset password' link on a site and use the resulting email link to log in.