perhaps it should not be so easy to reset a password on mtgox then?
perhaps it should be more painful for those who forget their passwords and have to wait
for a call from a mtgox employee who will then quiz them about details of their account?
Come on, there's only so much mtgox can do.
If someone breaks into your primary email address they've got you.