I’m guessing the upside is that if you ever lose your password there’s an actual account recovery flow based on identity verification.