And I have the same opinion of those sites whose only security is sending reset links to a user's email. But at least with those you don't have to hop back and forth between your email and the site anytime you use a different device or browser.