It seems like the OpenID guys should have included the ability to use an email address as an OpenID in the first place. But this does increase the chances of uninformed users falling prey to phishing.