<i>I mean, yeah, it's technically the right thing to do. But it's just shy of impossible to implement, and it presents a goofy user experience to your users.</i><p>oAuth is actually really easy to implement. I've done it several times now, never takes more than an hour.<p>I also find the user experience to be pretty solid too. Whats your specific complaint?<p><i>It is, after all, just somebody's Twitter account, not their banking credentials.</i><p>Problem being many people use the same password for Twitter as they do for their email.