Federation has a privacy risk, and I fully support non-federated logins.

But still no, a malware thst grabs passwords doesn’t mean you can blame a company for using passwords.