We totally agree. Having every site try to re-implement and keep up with security best practices is a waste of time, money, and makes it hard to trust anyone online.