Exactly. This is what we do on CallTheWeb. Not only is it much safer, but it allows our users to contribute messages to multiple accounts (say, their personal account, as well as a company account). If you tie things to a single email address, you limit your power users.