Just because it could be worse doesn't mean it cannot be better. Sure, you need to verify the e-mail, but by just knowing your account name hackers are still one step ahead of you. Let us choose a universal handle if you want accountability, but it should not be part of your login information.