If I understand you correctly, I think we don't need to consider this a security vulnerability because it doesn't prevent people from using Pidgin if they already have an account. Sure, maybe it prevents new users from registering, but that's not so bad.