> casual users don’t choose unique passwords Isn't this already mostly covered by browsers (like Safari!) doing strong non-memorable password autogeneration +

> casual users don’t choose unique passwords Isn't this already mostly covered by browsers (like Safari!) doing strong non-memorable password autogeneration + password sync, such that the password in the password field is already essentially acting like a token for these people?