An impassioned article, but the ultimate takeaway is that websites that accept ownership of an email address as some sort of identity proof do not operate optimally when you lose control of any associated email addresses. So, stick to one or two email addresses not generally subject to organizational appropriation, and accept that we don't have the tools for stronger authentication for this class of website at similar cost.