I almost linked that in my ggp comment, but really I’m making the opposite argument as the comic.

Either way you slice it, though, it’s clearly a huge disconnect between what is important to the human using a system vs what is important to the system itself, and the relative lengths gone to to protect those two sets of things.

it does not make much sense as you typically protect important online activity with 2FA