Sounds like a brilliant proposal to me, Jayson!
I had to test this myself though, and it doesn't prevent a user from signing in with the disallowed domain in the email address. Good idea though!
Looks like a CSModule would be the best solution here.
-Dave