I don't disagree with most of what you are saying, and would add that good security practice is a shared responsibility. Sharing passwords across sites is the u

I don't disagree with most of what you are saying, and would add that good security practice is a shared responsibility. Sharing passwords across sites is the user equivalent of storing passwords in plain text. i.e. It might be secure enough until its not.