Essentially yes :)
There are some stateful blockchains which allow changing the passphrase but of course there is no 'forgot my password' feature; a malicious actor who manages to steal your passphrase could potentially use it to change your passphrase and lock you out of your account but at least you don't have to live in doubt if you suspect that your passphrase was compromised.
The idea behind the blockchain auth approach is that you would only need one passphrase for all services but you would have to secure it carefully since losing it would cause you to be locked out of all services associated with that account.
So you're gambling bigger: less likely to have your identity stolen, but complete loss of everything to do with that identity, with no recourse, if it is stolen.
I'm not sure I like those odds.