> Sadly this solution still offers less security than systems integrated into SSO/OAuth and 2FA. OAuth implementations very often have vulnerabilities. Just lo

> Sadly this solution still offers less security than systems integrated into SSO/OAuth and 2FA. OAuth implementations very often have vulnerabilities. Just look at how many Facebook had! Not to mention 1) it doesn’t scale like passwords and 2) all the privacy implications. As for 2FA it’s in addition to primary authentication scheme, like a password, not instead.