I've never thought of that approach, and of course, how to go about limiting that as an attack vector. We so often try to make it as easy as possible to signup

I've never thought of that approach, and of course, how to go about limiting that as an attack vector. We so often try to make it as easy as possible to signup, we forget to think of it as a potential security leak. Thanks for this insight.