Sure - but that wasn't what he said. He said that requiring facebook makes him think that the website owner shouldn't be trusted with data.

Which has nothing to do w/ lock-in on 3rd party websites. It has to do w/ the relative security competence of those who choose to use FB Connect vs. those who choose email.