Comment by alper

> Stealing accounts is almost always done with phishing or social engineering

This only becomes real if you don't have e-mail fallback access to your account. Something which seems like a very bad idea.