[sporksmith]

Isn't this typically the case anyways? A hacker with access to your email account can just use the password reset mechanism to get a sign-in link to your other web sites.

[arunoda]

Yes! It is the typical situation. That's why 2fac auth comes in.

[sequoia]

"Have email, lost phone- help me" -Mallory