We actually did just what you're describing, but we used the emailAuthenticated field to hold the last login--mainly because we did our own authentication, so the emailAuthenticated field wasn't really useful to us anymore, but also because as long as that time is before the current time (which it always is if you set it to the login time) there's no difference in functionality.
mediawiki-l@lists.wikimedia.org