You end up with a huge security incentives problem. If there's a way to extract the value from one account and give it to another, you massively increase the incentive to phish users, set up black markets for buying items off of a hacked account, or just transfer it to your own.