1. If your email servers are compromised, than it makes them a single point of failure as most web accounts are accessible through forgotten password procedures

1. If your email servers are compromised, than it makes them a single point of failure as most web accounts are accessible through forgotten password procedures. 2. Most people (66%) of users use the same password on all websites. Which is a far worse multiple trusted party single point of failure. Which is what I meant by "better than whats currently out there". 3. For services that really require a significantly increased level of security, like banks, it is very easy and likely that further security measures that don't rely on the OpenID provider will be built in on the websites. 4. It is important to figure out the security issue and make a rewarding web experience than hold up ones hands and decrease data portability and increase friction on the web. We are hoping to help that process along and are very open to suggestions on how we can improve that.