This sounds like a really good starting point for this idea.

Simple, doesn't require much extra development, and is immediately understandable.

I'm excited to hear your ideas regarding the account security issue :^)