That's the same question I was thinking too. Also, Even If an account is stolen/sold, Can't you recover using your email address? Password reset or something like?