Great post, and something I've been thinking about for quite some time. Would love to see an open source framework made available that simplifies many of the nuances necessary to maintain a "secure" user database.

Don't get me wrong, this won't solve everything, but in my opinion it's a pretty big step in the right direction.