Well,it's not always trivial. I'm not even able to log in to anything important without multifactor authentication that is either a hardware OTP of some sort, or using a private key stored in my SIM-card that is accessed with a pin.

It's doable if you really want to, but it's much more of a hassle that just running a script. Definetly not doable at scale, for better or for worse.