requiring third party accounts to log into websites is already shit, but it gets worse when those websites insist that along with your account ID, they get to see the primary email address associated with that account, information essential to pull off phishing if you have a lot of email addresses.