[dave5104]

That's a bold assumption, depending on your audience.

[vxNsr]

But as others have said either way email is an attack vector because it's often used for account recovery, this way at least it's a lot clearer who is in charge of security, it's the user and the email provider (whether they like it or not).