but:

1. way less convenient to generate dozens and dozens of unique, complex passwords. which means it’s less likely to be used/updated as much as it should be.

2. not tied into MFA which is an additional layer of security and convenience