like, just thinking back, i didn't have to do this for steam, i haven't had to do it for most ecom sites also... forcing them all to do this security theatre will only lead to more and more data breaches and once the tempo of that gets high enough the people will scream enough
just like how they did this with airport security and people stopped flying