"Any Password Works" Is Not a Login Bug – It's a Decoy Tell

or it can also be a sinkhole, like all the canaries poping up these days`