Then that means those platforms are insecure and should not be used, or authentication moved to another layer that does not suffer from those limitations. My ru

Then that means those platforms are insecure and should not be used, or authentication moved to another layer that does not suffer from those limitations. My rule of thumb is that if authentication does not consistently require at least 1 second, passwords are probably stored insecurely. Fortunately password managers with unique generated passwords limit the blast radius.