That dude missed the biggest benefit

When someone tries to call into a provider and impersonate you, to take over your account… they would fail because they don’t know your login even!

Whereas, for most people, they’d sweet talk the person on the other line into resetting the password. Happened to me with GoDaddy, they almost rerouted my @mydomain.com email and then it would have been really bad