Thing is, even within these constraints it has rough edges. If you have two accounts (let's say a personal one and work/family/org one), getting passwords for

Thing is, even within these constraints it has rough edges. If you have two accounts (let's say a personal one and work/family/org one), getting passwords for the second account will just be a PITA. Same issue of course if you need someone else's password (e.g. your spouse's hotel reservation account's password) Trying to work this around means you'll either be asking people's passwords other the phone or other means, or you'll often switch between accounts and will want lower security on the account themselves as the identification process get old very quick. Basically, these limitations are not without impact on security and how people will deal with them.