A single sign on for the whole internet is scary, no matter who runs it. I really, really don't want the same password for, say, Rands in Repose and my bank account.

By the way, I second the SpamAssassin recommendation, but not everyone has such control over their email account.