Comment by pmlnr

And replace it with what exactly? Physical devices - Yubikey - are a neat idea, but not everything supports them. Biometrics is not password, that's a username replacement.

Also, it doesn't matter. Passwords, secret hashes, ssh keys; anything can be accidentally acquired.