True enough. On the other hand, all this is to avoid storing a username, which also isn't secure information.