Comment by fbdjskajxb

If you are making up random usernames on a banking site, attackers aren’t going to know your username. So it is two-step.

This is not a great idea if you have a public profile connecting your username to your email because someone can hack your email.

But you not knowing your password doesn’t hurt your security as far as I can tell.