I mean, it is additional work. Not only do you need to store the emails/passwords securely, which while it isn't _that_ hard, it is a needed consideration, but you also need to now:

- provide a password reset service

- find a way to send emails to this many people for low cost, it is a free service after all, so all of the confirmation/reset emails are an additional cost

- etc