But that doesn't expose all other accounts associated with that email address in general. But this approach makes them all vulnerable at-once which makes the hacker login to any site I am registered with that logs in using this service.