[jefftk]

> if someone get's access to my email, what can they do?

Take over every account you have that's configured to send password resets to that address.