Turning it into a paid utility would cripple it. I don't think I've made it clear enough that this is a proposed addition to the current ecosystem.

Especially since in your scenario compromised credentials could incur financial losses

Why would you be liable for that? An equivalent of the FDIC would work fine.