You last point is exactly why I avoid OpenID authentication.