Probably not. The most common method used by an attacker to gain access to another person’s account (on any online service that supports sign-ins) is to find the account owner’s credentials in a “data leak” and use them to change the account password and/or delete the account. Data leaks can occur when an online service’s servers or datastore are compromised by an attacker, and the contents published online. The best defense against such an attack is to use unique, complex passwords for each different service you join and to enable two-factor authentication, available in Settings.
Letterboxd requires the account password for email address changes and account deactivations, among other actions. If you believe your Letterboxd account has been compromised by an attacker, please get in touch with us at your earliest convenience and we will do our best to restore access for you. (In cases where permanent deletion has been requested and actioned for a deactivated account, we are unable to restore access.)