If I remember correctly Bruce Schneier at
Counterpane has written about other fundamental problems with passport. It is apparently broken no matter what microsoft does, short of a complete re-design.
Anyone who trusts microsoft's security gets what they deserve, and deserves what they get.