The main reason I choice it was because I only have to hold an integer id of your account id on twitter or facebook. If my database was ever compromised, there is only that piece of info about you that would disappear. It's basically leaving all the security problems (not to mention lost passwords, etc...) as a problem for Twitter and Facebook to deal with.