I can't log in with my email and password. Both are correct, but for some reason I need to verify that they are correct by sending a code to an email I haven't had access to in over a decade. Ummmm... maybe (and this is going to be a revolutionary idea) if you want emails to be more secure, you could have users change their password every few months. But since this is my junk email (seriously, what kind of person uses yahoo as a professional email?!), I really don't care about other people getting access to an account that is just full of Facebook notifications that I'll never read.