[seydor]

The email acts as an implicit second factor. But in any case security is a losing battle anyway. We should assume everything is compromised in the long term