I'm not a lawyer, but theft under pretenses of "protecting your account" (from being accessed by you, that is) is still theft.