I blame SAML and any other federated login being an "enterprise only" feature on most platforms. So users get used to sharing passwords between multiple accoun

I blame SAML and any other federated login being an "enterprise only" feature on most platforms. So users get used to sharing passwords between multiple accounts and no centralised authority for login. This causes the "hey what's your password? I need to quickly fix this thing" culture in smaller companies which should never be a thing in the first place. If users knew the IT department would never need their passwords and 2FA codes they would never give them out, the reason they give them out is because at some point in the past that was a learned behaviour.