If you want to be better safe than sorry, don't email them their password.

You can always offer a 'forgot password' system that sends a time-expired, one-time use password to their registered email address.