One problem here is that if I don't like someone I can reset their password to a new one, by entering their email address and saying 'mail new password'. Sure, they'll get the new one as an email but its a bit of an inconvenience. Probably not a major issue, though.