This just shows that password-based authorization doesn't work for normal (not computed engineers) people and needs to be replaced with physical cryptographic k

This just shows that password-based authorization doesn't work for normal (not computed engineers) people and needs to be replaced with physical cryptographic keys. This is a script kiddie level attack any teenager can do and it succeeded.