I think this is why the push for passkeys. Consumers can't be trusted in this environment with access to their own passwords. It's enough to make me wanna ditch the phone number and self-host everything.