The only thing worse than password based authentication is "something that I don't own" authentication: that is, my phone number, my email address, or my phone

The only thing worse than password based authentication is "something that I don't own" authentication: that is, my phone number, my email address, or my phone itself. I can't lose access to my password because I don't pay a bill, or because of an opaque process where someone accused me of "unauthentic behavior", and the trust and safety board suspends my account, promptly unpersoning me unless I can make it through an appeals process that is about as fair as a witch trial.