I wonder if this is a good reason to NOT use your email provider as your authentication (OAuth) provider?