Do people think that a decent OpenID provider would sort this out?

I quite like the idea of using an OpenID provider for everything which had very strong authentication (e.g RSA fob). You'd only need to log in a couple of times a day with a login timeout of an a few hours.