The solution to a fundamentally-flawed security architecture is not a better hash algorithm, sorry. bcrypt is good at what it does, but that is such a limited

The solution to a fundamentally-flawed security architecture is not a better hash algorithm, sorry. bcrypt is good at what it does, but that is such a limited domain that it is insignificant next to the decades of security research and experience that many popular modern web apps blindly ignore. What does bcrypt have to do with the principle of least privilege, for example?