@newt It's getting absolutely insane. We're reaching like 3-4 levels of authentication for basic logins. To get into my company portals they want my username + password, which then prompts me to acknowledge a push-notification from an authentication app on my phone, which then tells me to verify the numbers presented on the screen verify the numbers presented on my mobile device, which thereafter asks for biometrics (either face or fingerprint unlock of my device) or my mobile phone's password. So, what's the point of a username and password, really, then?
I lost my primary GMail account because I got a new phone number and Google wouldn't accept my username + password but also demanded I produce a code sent to my old number while providing zero resolutions to that conundrum.