Comment #571

The problem they need to solve is "I counted all my goats on your app, but I've forgotten my password, how can I get back in?"
Hence the over-reliance on email as a 'proof of identity' system; but also the two-step to make sure you've provided the *correct* address ...