SSO centralizes the problem to somewhere that can require hardware-based auth, e.g. passkey, Yubikey, etc. Passwords are fine if they're combined with hardware-

SSO centralizes the problem to somewhere that can require hardware-based auth, e.g. passkey, Yubikey, etc. Passwords are fine if they're combined with hardware-based auth. Expecting every vendor to implement passkeys etc. natively isn't going to happen.