For real. Unique, strong password and two factor auth. Your email account is the master key to everything you do online. Protect it accordingly.

Unless you don't use the same email account for password recovery, your email address is as important as it seems.

However many sites won't allow you to have a different email account just for password recovery, that is insecure, as people would then know where to go for.