All of these are great ideas. And, there should be a #8 - just for web developers. It should be: design your product with user security in mind. Don't ask for personal information as a gateway to your services, whether it's Facebook, Paypal, or a bank account. The iTunes system of registering devices for access would be a step toward greater security.