Oh, just forgot to mention a problem, that when coin becomes CPU (people say after N=12), coin become a target of botnets and their dumps.
Pools should limit the number of worker connections one account can have. And not allow two accounts to auto payout to the same address. But guess they won't.