[brianmcd]

> The point of failure wasn't "using a non-gmail address," it was "using an untrustworthy registrar."

But wasn't his point that gmail.com is much less likely to have its MX record compromised than any domain you could possibly register? So using your gmail.com address removes the issue of registrar trustworthiness completely.

[ansible]

You're trading registrar trustworthiness for email provider trustworthiness. I'm not sure what is better.

I suppose I should start actually paying for email, and go with protonmail or somebody like that. If they have decent and competent customer service, that would reduce the chances of getting hacked.