They shouldn't need to log in to the user's password account at all through OAuth or any other way! A side problem with this is that if it's truly easier for t

They shouldn't need to log in to the user's password account at all through OAuth or any other way! A side problem with this is that if it's truly easier for the user than clicking on an emailed link, then users are going to expect that from all of us. So you have to do the sleazy shit or from the users' point of view you are "behind" and less good. I wish there was some good way to educate the user to privacy dangers. I mean, we could make an online workshop but would have to support it by advertising because we would have to reach the people who don't realize there even could be a problem. And the people willing to drop $5 on it are the ones who don't need to (classic problem in education).