That's a nice solution to the "emails gone wild" problem, but - no offense - it's a bit besides the point. We could just as well be talking about S3 data, face

That's a nice solution to the "emails gone wild" problem, but - no offense - it's a bit besides the point. We could just as well be talking about S3 data, facebook posts, tweets, anything with (side) effects beyond the active database record in question.