There are other, simpler steps that could be taken as well.
For example, required e-mail activation before a new FA account can actually be used. Sure, it's already standard procedure on various sites (and I don't remember if FA did this when I registered), but if there were, say, a ten-minute...