Email is not bad, but only if the corresponding google account(or whatever the email account is) is itself totally locked down and secure with no openings. Which can be pretty tricky, but doable. There is a lot to completely securing online accounts on the whole. If one lil thing is missed, it can be all for nothing basically. Can be overwhelming, but just trying to provide some helpful info wherever I can.