I imagine most people are still using a single email address for everything and very poor passwords, probably the same couple variations everywhere. I try to think about the liability associated with some systems. Like it pisses me off that my bank forces SMS 2FA activated (even though I have OTP en...