Well, one way would be to have the "registration completed" email give a link that lets you reset your login info. Sniffers might be able to intercept your password, but they won't have access to your email, and you can use the link at any time to change your login and lock out the person who's hacked your account.