For me it's a bit like how first class passengers cover the cost of the flight for all the economy class passengers.

And I 100% agree with you. As good security practice SSO should be available for all but the reasoning makes sense