@nikitonsky email is a user’s global ID, not a secret.

The public key is unique for each website and can't be used to identificate users.

A public key is better than a password hash because of the better crypto methods behind (it is hard to do hash right).