Rules are annoying; passwords are what's terrible, full stop. They are merely the only thing we know how to do which meets the expected constraints on auth. I

Rules are annoying; passwords are what's terrible, full stop. They are merely the only thing we know how to do which meets the expected constraints on auth. I can't even give them a grudging 'least bad option' because they're so bad, in our current context and multiplicity of identities. They are so unmanageable for normal humans we have a bunch of helpers, which become the new single point of failure. Yubi dongles on a keychain may well be where we're headed.