I don't want to diminish security leaks in general, but if your email address is first.last@employer.com where's the breach? Given, this I think Saas services

I don't want to diminish security leaks in general, but if your email address is first.last@employer.com where's the breach? Given, this I think Saas services should make a move back towards usernames.