Then again, with as little as read-only access to your inbox, someone can steal your accounts in other websites.
Plus, the two-factor authentication may sound like a hassle but it really isn't. You get used to it really fast, and you have to use it surprisingly less than you'd expect because of the option to automatically remember devices (for a month).