And how about all "forgot your password" forms that might be exploited on other services. An other service you not been using for long sends you a "long time no see" promotion and your old account is in someone else's hands.

I think there's been a lot of lessons lately about why Internet should not be centralized...