Agreed but I'd rather they allow normal passwords where you can use the "password you can't remember" and U2F token like civilized people.