I thought the story was that they were readable User IDs until fairly late in the dev process, when they realized they were giving away what people's gmail accounts were.