That's a very nice sentiment, but it won't fly if you're trying to provide third party authentication in a manner that minimizes the potential for fraud (hence,

That's a very nice sentiment, but it won't fly if you're trying to provide third party authentication in a manner that minimizes the potential for fraud (hence, the oauth clusterfuck).