My point being btw that not everyone can do passwords, but they get by anyway and some have security teams for their company or use services to protect their security for them.

This is still 100000x better than 1 central authority.