How's this any different than buying an expired domain and doing a password reset .. anywhere?

-- Probably someone else already mentioned this in the comments here, I just couldn't see.