I think we are all looking at this as too much of a zero-sum between privacy and security and ease of use. What if we did away with passwords in 90% of use cas

I think we are all looking at this as too much of a zero-sum between privacy and security and ease of use. What if we did away with passwords in 90% of use cases but required validation to change account settings, like email addresses?