Minor take away.

Have a separate email for the contact on all you valuable accounts. The email account is such a huge security flaw wrt social hacking that you need to protect it.

Alternative, get rid of your friend :-)