Most people don't enter authentication credentials they use elsewhere or conduct financial transactions on torrented software, like they do on websites.
I'm not going to be using my CC on a site designated a terrorist organisation by the US Govt. anyway.
Using OpenAuth / OpenID / Facebook login etc. would mitigate the password problem.