A breach in your OpenID account is the same security risk as a breach in your email account, if the sites do account recovery via email.