I think it's the right sentiment - but you're simply shifting responsibility to the email account, which uses a password and subject to massive security breaches if everything is tied back to one email for authentication.