Wouldn't this be mitigated by not using the same login information on the startup site?