My account password recovery "token" was sent via email. I thought that was a no-no wrt security. Edit: This was the text below the token: Keep this code SAFE

My account password recovery "token" was sent via email. I thought that was a no-no wrt security. Edit: This was the text below the token: Keep this code SAFE. Anyone with this code and your username can gain access to your account. If you lose both your password and your recovery code, you will lose access to your funds so be safe!