With the exception of sites that support 2-factor login, how is this ANY different from our current system? If you have access to someone’s e-mail, you would suddenly have access to 95% of their accounts through “Reset Password” features.