As for me, just strong password and enabling 2factor auth in settings are more than enough.

Let me explain two things.

first, the idea is completely different from whattomine and so on. Because project's data is based on real statistics from real people. Let's say, facts. Imagine you provided 20TH during the day and got 0.05 BTC back from the pool. This data (20TH, 0.05BTC) is used for the project. Nor the advertisement from pool homepages or something like that. Accepted hashrate and profits are gathered, aggregated and used for the graph.

Second, why registration is mandatory. One of the core functions is an ability to leave a review for any pool, if and only if you proved that you are using it. And your hashrate with that pool will be an intergral part of your review. That's why.

I think you are too paranoid, I put fb & google login only just because it is easier, so I skipped the whole registration/authorization/passwords etc. system. That is exactly what Google & Facebook auth are designed for. Moreover, if your fb password is so easy to guess, you better deal with it instead of reporting false without any proofs.

Having no idea what BTC pool is the most profitable, in practice?
I am not sure what pool to choose as well. So, I suggest uniting our forces and collect real, practical statistics all together, for our community prosperity. I made a free service for that,  please let me know what do you think! https://coinpoolrank.com/ (It seems that I am NOT advertising or selling anything, because the whole thing behind the link is free as in freedom).