Multiple accounts means more work for the attacker. E.g. using unique emails for Paypal, Godaddy, and Facebook would have made this harder.