Point 4 in the first list is exactly why I wish people would stop trying to replace passwords and focus instead on augmenting them. Information codified physically (token or biometric) can be copied vastly more easily than information codified in neurons.