Yeah, that would suck. I heard a report that, if you read the fine print, you can have a code sent to an email instead of giving the password. Of course that email address will be saved by them, and probably sold, but it's better than giving a password. Can't verify as I don't use it.