Better protection for accounts

[Ecthe]

Hello, I'd like to ask one thing.

I think that throw down IP filter via Forgot pass is unfortunate solution.
For example, don't you want to put security question, where answer will know only the right account owner?
And ofcourse don't send this answer on mail. Owner must remember his answer.
Maybe for change mail u can use this proposal too.
More security and less thieves.

Sry for my eng, i m using translator.