We thought of that a lot. But like our other baby, http://id4me.org - where we chose use use DNS and OpenID and mesh it into a federated identity protocol - email infrastructure is simply there, it's federated, robust, run by millions of servers, large and small, tested, filtered, pounded, drowned, abused you-name-it. That buys some extra overhead.