and there is still a password that can be leaked, the one for my mailbox

It's forcing you to centralize your access to a single account, which sounds bad, but at the same time it's always been that way since most services provide a "forgot password" feature.

If someone gets into your email, your accounts are all fucked anyways.