At this point I'm tempted to think we ought to be managing our own domain instead of email so we can ditch a breached email whenever it is leaked. Together with the use of virtual credit card to limit the exposure. It doesn't stop website collecting other kind of sensitive information like addresses and phone number though