I guess they could have done a public/private key pair in 1996, but doing that over a phone call was going to be painful. A simple password read over the phone and verified by the software was the best solution at the time.
Mind, this was also intended for a world where internet connectivity was not to be expected. The majority of PC owners were not online.
Mind, this was also intended for a world where internet connectivity was not to be expected. The majority of PC owners were not online.