Yea lengthy passwords are better passwords. But if one can change your password on your social network account, he can equally do so on your email account, may be just making his hacking an hour longer. Though sending changed passwords to email account is more secure than changing on social network sites

I agree that the "FORGOT YOUR PASSWORD" fetaure has nothing to do with strengthining your password. If that system is weak or the answers are easily guesed, it's a volt with a hole on the back.

Well I think that clause is a necessary evil