Why not both though? I think the approach these days is to try to collect everything and put it into a model. It might be similar to what happened to passwords

Why not both though? I think the approach these days is to try to collect everything and put it into a model. It might be similar to what happened to passwords. Passwords are still important, but they are just one signal among multiple others.