Convenience is the enemy of security.

Using Google as SSO is not great but at least you can reset your password with Google. If you NSec is leaked you are screwed.