There's always the possibility of someone trying to bruteforce your account. Thus, more accounts = less chance of them achieving the information. Also, most account thieves would only target a small group of people to lower the chances on getting caught. If not, they'd simply take the items periodically.
But nowadays, people dont use bruteforcers anymore. Keyloggers and algorithm-based cracks are more efficient and less tedious.
Aside all that, I still choose option 1 for sheer convenience.







