And how did email become the defacto verification method. 2FA like TOTP/Security Key should be. It can be used offline and no connections to shady corporations.