[ethics404]

I'd say they've predominantly used your email account to verify ownership, which Is appalling from a security standpoint.

Anyone (myself Inclusive), can spoof your email address, easily grab your username and have the authentication removed.

Exactly. That shows how easy it is to compromise such accounts.

Hence the objective of this thread.

They (Reddit), should have other measures In place to verify account ownership, such as a security questionnaire. It can Include things like when the account was created, the (approximate) last login time & date and so forth.

Absolutely. But the reality is those companies want to offer a convenient and user-friendly experience which is done at the cost of security. Many real owners forget such credentials you mentioned above and end up creating new accounts to eschew the hassle. Many even don't bother to contact the support stuffs or even don't know about it. Recently some app introduced magic link to login which is sent to respective account's email. A very convenient way to login but you know the problem behind it!