How is that any different than someone hijacking your mail account directly? I mean, yes, now there are 2 things to secure, but it doesn't seem like very much added attack surface.