Yeah but your password on my product with MFA is probably used everywhere else without MFA. Most products have a low risk security profile so they don’t want to be the leak for higher risk stuff.