/signed
How many people use the same password to log into the game as they do to log into the email address they use for the game? I would guess somewhere around 90%, and at least 50%. Finding email addresses is like taking candy from a baby. As far as security, the email address to begin with is sent unencrypted and therefore reveals half of the security of an account every time you log in to the site or the game.
To keep any account as secure as possible, the username part of the log in should be just as, if not more, secret than the password. The password can always be changed. The username, well, probably won't see this change as it is rare and more difficult to implement. this is why you don't usually use an email adress for such things as you generally cannot change these things without manually editing the database.