[StephanKletzl]

We offered a password-free option but it was too complicated (and thus, the users preferred the current option). We'll likely add the other option in the future (but only as an addition to the current option).

[schrodinger]

You should be prepared for Amazon to block requests from your servers. (And I think this would be the right thing for them to do)