Hmmm...doesn't bode well for web based email does it? Just one more reason why I STILL feel justified using only my on board email client.
You will find varying opinions about this. There are pro's and con's for both.
Please understand, there's always a risk with email but using on board client mail and creating a strong password and unique user ID, it seems the risk is at least minimized...that is, more so than it would be online.
The only way a scenario such as this would be compromised, is if one would go about posting his/her own email address willy nilly on various web pages for any purpose (to include registering for anything). Be advised however, there is more to "compromised" than just some hack finding your email address and deciphering your password. Secure email is much more than just that. Nothing is said here about encrypting the content of your message, which is another "security" measure entirely and good for another thread, not this one.
If registration is required on a web site, research the web site to make certain of any question(s) in your mind whether there is a valid reason for registration, and that the web site is truly one where you want to tender your personal information. Afterward, make certain you check the profile created on that web site and that you have the option to remove your email address from public view.
There is however, much more to securing email than to consider whether to use an on board client, which could become vulnerable at some point...or your browser. When you use online email accounts, your browser is essentially, your email client and we all know just how secure (or not) your browser can be (depending on which one you use). Ugh!!! The things to consider seem so many, and still nothing said here about your on board security applications that should take a look at your email...ANTIVIRUS! Again, should be another thread.
Using caution as described above, a user can safely use on line email accounts, but might also be more vulnerable to having a spam filled "in" folder.
One final note, Microsoft chose not to include an on board email client with Windows 7. Having that in mind, the individual user then has the sole responsibility of policing and securing his/her own email application whether on board or online.
This article, although somewhat antiquated, still is a good read. Many suggestions there are still good and valid. Bottom line is, user's need to learn how to be aware of the variety of secure measures they can take, and situations to avoid.
If you've NEVER had an occasion to have been helped along in this forum in the way of removing some malicious software from your system (or elsewhere), you may never have had the opportunity to have read the excellent suggestions by one of our own colleagues "Tony Klein". His article,
So how did I get infected in the first place?, has been plastered all over the web...posted
Here Too of course (by permission), but I chose to point to the "Spybot" article as it also has something to say about email.
Tony's recommendations have been the bulwark for countless user's education in the way of security measures they can and should use to their advantage.
Good luck, and safe surfing!