@kyle@librem.one Point 1 is taken though that's still more a concern of enshrining bad and especially outdated policy.
Good policy is good. Bad policy is bad. Good policy administration is keeping tabs on when good policy becomes bad and fixing it.
I agree on your points re: passwordless future and lockin where that's based on devices. Keep in mind that Apple, Google, and Amazon are all racing down this path as well ("swipe" payments with smartphones, Siri, and Alexa, etc.)
That's an issue with lock-in. See Shapiro and Varian's late 1990s book, Information Rules.
(Note that Varian is now chief economist tat Google. Go figure.)