Anybody looking at your stats page could hit the "send me an e-mail with my password" button. Since the e-mail goes only to you, there is no way for anyone to get your password this way, but someone could really try to annoy the hell out of you by sending you a flood of e-mails...
JHutch