Something that often gets overlooked in these discussions is the impact of all this on older people and people with intellectual disabilities. Managing all of this is annoying to an average person, but can literally be impossible for an older person with a memory disorder. It creates a lot of additional vulnerability for them, because they now need to trust someone to help them manage their accounts. It also puts a h…
I very much wish more people considered the various types of users and contexts that use their system. Many seem to be moving towards a "magic link" solution, which can be convenient but is also predicated on the user's phone or email which leaves users with a single point of failure and little additional protection or recourse if it is exploited.
While I understand the burden on organizations to protect user data, the user should have say as well. A one-size fits all solution almost always leaves users on the lower slopes of the bell curve vulnerable or frustrated.