... there are just too many sites that still ask for username+password, and only verify your passkey after that. Learning is slow, yeah? (and meanwhile, SSH goes "hold my beer")