I agree that there will always be a need due to other bits of information, but IMO if you follow this train of thought for authentication specifically you wind up at "passwordless" WebAuthn.