> The point of failure wasn't "using a non-gmail address," it was "using an untrustworthy registrar."

But wasn't his point that gmail.com is much less likely to have its MX record compromised than any domain you could possibly register? So using your gmail.com address removes the issue of registrar trustworthiness completely.