Nice straightforward question. I had to do some reading because I didn't know teh answer, but for me that makes it a good question.

But I wonder why this strange restriction that alter user can't provide a login for a user who doesn't already have one exists. Presumably MS has some reason for it, but BoL just tells us about the restriction and doesn't give any reason for it (tha's fairly standard for BoL, of course).