[daveFNbuck]

You're relying on your email security either way, since anyone can trigger the password reset email if they get access to your email account.