OpenID kinda scares me, security wise. There's too many ways for developers to screw it up. Witness the ones who used Facebook names as unique user identifiers.

At least with email, provided by the email host, the string you get from them will be unique.