Some of our customers brought up issues with our old system and we thought they were legitimate concerns.
With the old system, you needed the username and email address for the account to push a domain. If someone were intent on hacking your Dynadot account, they'd have 2 of the 3 things needed to succeed.
So we changed our system to make it a little more secure.
As an old user of DD with 150+ domains, I happen to agree with the DD staff on this one. Having been nearly a victim of domain theft some years back, as far as I am concerned there can **never** be enough security with our domains.
Think of it this way: just put the domains you would not mind losing into the old method. I wonder how many will do that, given the choice :-)