Are all these checks safe? I mean, in some cases you can reveal some data with password recovery feature but email will be send to target mailbox.