I actually think a time delay would help make it reasonable.

There might be gone-to-Costa-Rica-with-the-Peace-Corps *and* left physical control of an email address in the hands of someone who should not have been trusted with it situation, but I think that proving not just (immediate and however temporary) control of an email address, but extended control of the email address, would help make it a more acceptable form of risk.