@mhoye for partly this reason I'm philosophically against "hosted web service" as a design.

There's a lot of interesting ways around "store user data on a central server to which users authenticate" and I wish there were better technical solutions out there for designing in this space.