...if the password for said email address is already visible on the same page (assuming negligent password reuse) what kind of verification could you hope for?