For most companies offloading your password management onto an email provider is the right way to go. Suddenly, for free, you get MFA, a dedicated security team

For most companies offloading your password management onto an email provider is the right way to go. Suddenly, for free, you get MFA, a dedicated security team, and you'll never need to do one of those "Our password database has been hacked. Here's what we're doing..." press releases. You've eliminated one point of failure (your company), and haven't added any because you are already doing email based password resets. You can delete all your password related stories from trello or whatever. You eliminate all the bike shedding around how to store passwords. You've improved your initial user experience by an order of magnitude. Everyone dreads setting up yet another account password. Don't underestimate the joy a user feels when the signup form is just "click one of these buttons or fill in the email field". (The buttons are 'Connect with Facebook' and 'Connect with Twitter'). Users would much rather flip over to email (which is always logged in anyway) and click a link (especially on a mobile device) than enter a login/password.