> If your only method of contacting your customer is via email and the email is demonstrably controlled by a hacker then you have a hacker for a customer.

That's obviously false. The context of this very discussion is that more than one person is able to log into an account for many email accounts.