That’s a good point, and one reason I use two-factor authentication for important services (Gmail, LastPass) that offer it.