Great suggestion, but I would like to see this fail in the real world before rushing to fix. The position of email makes this less likely to happen.
I can imagine cases where people include emails in custom fields and they happen to be the same email you registered.
I guess a change I support is “check the password/name/username is not the email” - do we have that covered @nbianca ?