If somebody hack your TPT account, he can get your email, and if you're using same password in TPT as in e-mail account, the e-mail account can be hacked and hacker can easily get your password for other websites just by clicking "I forgot my password".
Simon should delete text showing e-mail at Change Avatar page and add to registering page "NEVER use in The Powder Toy account same password as in your e-mail password, it makes for hacker easier to hack your another website accounts. For group or companies accounts just register another e-mail just for group, never use your personal e-mail while registering group account." @petrol change e-mail password
OnTheToilet I can assure you, if one were to be capable of exploiting a vulnerability in the website, they will try your password for your account on your email password.