Well, I think there's a way around that. I could always set up an account for your friend and reregister it to their email address, at which point they could change the password and have a secure account all their own. It's a bit circuitous, but I don't see why it wouldn't work.