It was noted many times before in several threads and people have mentioned that it should be included in the new forum software. It didn't have it's dedicated thread then (well, now it does ). I do agree; a lot of hacks happen due to said flaw as hackers once gained access to the account can simply change the email and password.