I for one don't like how companies use email as a security crutch.

Ownership of an address at a particular point in time doesn't equate to proof of identity. One hacked email account and everything else falls like dominos.