[ethics404]

What sort of credentials did they request, to verify that you're the rightful owner of the account?

They requested just the username, nothing else. I sent my username via the email that is linked to my Reddit account.  That was enough for them to verify my ownership.

I'd say they've predominantly used your email account to verify ownership, which Is appalling from a security standpoint.

Anyone (myself Inclusive), can spoof your email address, easily grab your username and have the authentication removed.

Exactly. That shows how easy it is to compromise such accounts.