Not to mention all the sites where the email address IS the account, and often don't have good procedures to change it.