In my anecdotal experience, a large share of the 16-20 year old crowd can barely remember their email address, let alone the password to it. They use it as much as I use my postal box.
You're still right that authentication doesn't imply authorization to send PMs, by the way.