You can rely on individuals doing sane things, but you can never rely on 'everyone' to do sane things. Hence recovery options exist, and those always cause secu

You can rely on individuals doing sane things, but you can never rely on 'everyone' to do sane things. Hence recovery options exist, and those always cause security problems. I think a really amazing application for this technology is in places where people are unable or face challenges to manually passwords. For example due to equipment such as gloves, or extreme weather conditions etc. or even disabilities... - it's a good secure way and slotting in a device in a port can sometimes be much quicker and easier than taking off equipment and entering passwords. Furthermore, a physical device can be easily destroyed if it needs to be. If its in your brain... you can't destroy your brain and someone can always get to it... Extremely stressful conditions can also make it hard to enter or even remember passwords... Lastly, a robot or even flying drones can be used to slot in a key to a device. entering some code on a keypad would be more of a challenge in such cases. radioactive, chemical or gas leaks and other hazardous circumstances might prevent an operator from entering a password... I think technologies like this should first aim to be implemented in places where to original methods we use aren't applicable, or face challenges. Once those areas are covered, it could be considered to be pushed to more mainstream applications if indeed it is found suitable and understandable, and people have had time in real implementations and operations to iron out the creases that 'regular people' will definitely trip over. Also, having it applied in certain fields might help to convince people it's actually more practical, and not prone to account loss as the default sentiment always seems to be. in short: Like with a lot of technology it should a) first find a place where it's really urgently needed, and has obvious benefits, and little downsides. b) through that, earn trust of potential consumers in order to apply it more broadly. It might sound a bit off the ball, as essentially the aim is to increase security for all people in interacting with services / devices / data etc., but you need to start somewhere more practical rather than trying to immediately come up with that golden solution which will put a lot of people out of business. such solutions ,even when achieved, are rarely implemented in the real world or face adoption issues anyhow. (due to 'harsh competition' usually... )