Comment by eMGm4D0zgUAVXc7

Given that banks usually MUST validate their customers' identity card the opportunities for tracking your users with this must be superb.

I'd frankly prefer "insecure" user+pass over all of these guardrails which are 90% about control over the users and 10% about security.