És mint tudjuk, egy domaint sosem lehet ellopni.
https://medium.com/@N/how-i-lost-my-50-000-twitter-username-24eb09e026dd
(ok, nem mai sztori, de azért érdekes)
Neki pont az a konklúziója, hogy ilyen public helyeken inkább valami nagy nevű domain mögötti emailcímet használ loginnévként, mert ott legalább maga a domain nagyobb biztonságban van.
Avoid Custom Domains for Your Login Email Address
With my GoDaddy account restored, I was able to regain access to my email as well. I changed the email address I use at several web services to an @gmail.com address. Using my Google Apps email address with a custom domain feels nice but it has a chance of being stolen if the domain server is compromised. If I were using an @gmail.com email address for my Facebook login, the attacker would not have been able to access my Facebook account.
If you are using your Google Apps email address to log into various websites, I strongly suggest you stop doing so. Use an @gmail.com for logins. You can use the nicer custom domain email for messaging purposes, I still do.