In reply to David Coveney.

That is not exactly true. If I need to reset a password in order to login into your WPML account then most likely you will be notified and will be alerted to the fact that someone is trying to do bad things with your account. To avoid you noticing it I will need to prevent your access to your email, something that you will notice as well sooner then later.
So if I have a RO access to your email and you just sending unencrypted data in it I may as well just seat quietly and do nothing.

And then there is the issue with not so private computers in the household and workplace. Do you really want your kids to have free access to your amazone account?