Markus,

>...So if one is concerned about security, make up a fake email address, and you are all set.

Great explanation of your views on Passport, BTW, but I think you're missing one little security hole in the statement above. You'd better make up an address that can never be a valid address, like maybe "you-da-man@eps-software.com". Otherwise, if you did for example "you-da-man@yahoo.com" the real you-da-man at yahoo could try to log onto passport, request password sent by email, and become you. :-)