I love the “password-less” account access that Microsoft gives me, it should just be that. Just give me a list of numbers to pick from when I attempt to login and we’ll call it a day. I just don’t see how that gets compromised without a user error.