I agree it sucks. It ads a complex & flimsy step to an already brittle login process. A big problem is captive browser cookies. Gmail for example uses a capt

I agree it sucks. It ads a complex & flimsy step to an already brittle login process. A big problem is captive browser cookies. Gmail for example uses a captive browser for links. The flow from Safari --> Gmail --> captive browser means that your login session is lost in captive browser limbo. Authentication is so kludgy, and all the attempts at securing it lead to horrific UX. How many screens does it take to log in: 1. enter username, 2. enter password 3. enter 2fa, 4. verify email 5. open email inbox 6. open email with code 7. Open captive browser 8 ( if you are lucky) Open the original browser to log in. 8 screens that each could succeed or fail or the user can get lost.