If you are just an individual you may have difficulties in proving your ownership of a domain in case you loose it.
Now the part about attacking your email/domain:
If somebody transfers your domain without your will you have to contact domain registry and you will get it back after a bit of back and forth. It happens, noting new here.
Unless you register .eu domain - there is a whole institution dealing with that and there is no easy and quick way to transfer the domain in a stealth way + long grace periods and better authorization so its much harder to even try to do that.
Compare that to Google - your account gets locked or even worse somebody gains access to your email and that's it. Your not getting it back.
There is no way to be locked out of your own domain after forgetting your password.
That's like basic stuff people! Buy your own domains already.