Morally yes you are correct (imo). But which product are users going to go for - the one that goes the extra mile to keep them safe and help them out, or the on

Morally yes you are correct (imo). But which product are users going to go for - the one that goes the extra mile to keep them safe and help them out, or the one that doesn't give a damn about them? We have to deal with reality, not ideals, and the reality is that most people do not practice good password management. > 99% of users who aren't IT or security professionals would just prefer to be done with entering their password after the first time, period. Which is just as possible with tokens as it is with passwords. There is no reason not to use tokens.