The rtfm for the Login add-on states:
Why are we using the &excludeExtended parameter? Well... there seems to be a bug in the Login Snippet where these fields with validation rules.
at
http://rtfm.modx.com/display/ADDON/Login.Extended+User+Profiles#Login.ExtendedUserProfiles-UpdateProfile%2810%29
Is this still the case or is it now safe to use the validation rules with extended fields?