it is perfectly. but where are the guarantees that these guys will not be able to recover your password and just do not steal your money? I think there is only one option: always write down your password.
I agree with you, knowing that they can retrieve your bitcoin account they definitely knows how to access and to get in to your account, so still it is risky. so the only way and safest way is to store your bitcoin account information in different places for you not to forget nor lose it.