Don't be fooled, even if you "secure" it by changing security question & email they can get it back via a phone call / email to support.

I have had this done to me several times when I fully secure the account.