With regards to the last point - privacy from your identity provider -- isn't that somewhat moot for most sites as they have those facebook/twitter/google+/etc share/like/plus icons that report back anyways.