[moduspol]

Normal people just reuse a few variations of the same password across all of their accounts. Federated identity isn't bulletproof but it beats the heck out of reusing the same password.

[rapind]

Login tokens solves the re-use (but does put the onus on their email being secure).