Expecting users to remember individualized passwords and maintain separate authentication factors for every service is placing a lot of trust in the user! I thi

Expecting users to remember individualized passwords and maintain separate authentication factors for every service is placing a lot of trust in the user! I think this is a case where it's reasonable to think that automation might actually lower the overall risk. Furthermore I don't think maintaining individual factors for every service would protect you very much against a browser compromise.