Thanks for this Michel.

The option for Blocktrades to hold the password is a very interesting option.

Quite rightly they have the disclaimer in case they are hacked.

Once you change the password it is no longer held by Blocktrades.

So maybe the optimal tactic might be to let Blocktrades hold the password for the first couple of months or so, or until the account reaches maybe 100 SP or similar, and then change the password.

That way a new user would be covered from password loss in the early 'vulnerable' period until they have got to grips with the system, and then if they are still using steemit they can take over responsibility for the passwords themselves.

That might save some of the 'orphaned' accounts one often hears about from people who lose their password in the early days.