A confirmed email address is probably the easiest point of user authentication. Other than that - I totally agree with you that giving an email address away fo

A confirmed email address is probably the easiest point of user authentication. Other than that - I totally agree with you that giving an email address away for sign-ups is pretty icky, but a necessary ickiness as there's not much else to choose from except OAuth (Google/Facebook/Twitter/LinkedIn/etc)