Many baseline versions of SAAS software will use username/passwords but in order to get SSO you need the premium version. Is it fair to accuse that company of p

Many baseline versions of SAAS software will use username/passwords but in order to get SSO you need the premium version. Is it fair to accuse that company of profiting from cybersecurity threats because username/password is less secure than SSO? "If you only addressed the capability from product B in product A then product B would not be necessary" is not automatically greed or malice, these are just basic product portfolio decisions.