True enough. But (assuming they actually implement this in this way), there's nothing much that can be done about it aside from acknowledge that trusting them was a mistake.

You could always just abandon the account and never use it again, I suppose.