OpenID is basically a permanent man-in-the-middle. It's otherwise great, so long as you don't mind your OpenID identity provider knowing about every site/service you use, and every time you choose to use them. Persona is a big step forward in that regard, but neither get around the fact that, in most cases, users are going to be entrusting control over a bunch of their accounts to a third party.