I think Google Apps does this when you are setting up a new user account for other user. Sending that is different as in they need the password to access their account for the first time.

Although there are better ways to setup an account and may be gogle app should force the user to change their password on their first login but this is not the same as me setting up my own account and getting an email with my own password I just typed twice to register.

Myspace does this too. Good thing I use a different password for every site, but even then we're vulnerable to exploits or other security holes.