If cookies are being shared, and the users have access to them, what about the cookies from sites with passwords in them...? I don't _think_ I use any sites that do something that dumb, but I'm sure they exist.

I would never use this specifically because of that.