I only read the first page, however in order to reset your password dont you get your "password" to another email account. I know it would be stupid trying to reset your password by them sending out a confirmation email to reset it if you cant get into your account.

However if the feature works like I think it does. Click forgot password > Security question > reset, that is kind of fail and anyone with anything between their heads could do that.

However I presume it is a free account so ...

EDIT: And what the hell is a prominent politician using Yahoo for ...