Isn't that the case anyway? If someone else has control of your email account they could reset your password