I like the principle of the idea, but the practise is another matter. You want me to trust a piece of external Javascript on my login page? A piece of javascrip

I like the principle of the idea, but the practise is another matter. You want me to trust a piece of external Javascript on my login page? A piece of javascript that is used exclusively for authentication? If your service took off, I don't see how you won't end up with at least one major security breach :(