It's an important metric when designing securiry solutions to make them fit for human capabilities.

Replacing every authentication challenge from a password to a 512 bit key might sound good on paper for security but in practice it would just make people rely on physical security keys and backups which can get lost or stolen.

A password has the benefit that is something you know, not something you have.

If we could use radom keys as passwords, that would be the best of both worlds imo.

The more incovinient a setup is, the easier it is to make mistakes. Most cyber criminals have very good opsec, but their impratical setups cause them to make mistakes 1 time when they are in a rush and that is usually enough to get them.