Could you elaborate on that? As in, the degree to which email is unsafe. I try to be security-conscious, but I just now realized that I often opt for email-type login even when presented with alternatives. Would using OAuth, Facebook or Github for login be safer than email? Or are the vectors of attack different, and is it difficult to compare the two? Or does it depend on whether I'm using GMail or something else?

Based on what I know, my impression is that email is significantly worse, and somehow I'd never considered that. But I'm not sure if I'm missing something...