a) password managers don't have to be terrible third party solutions. Safari has an amazing password manager with strong random suggestions, and it's just enabled out of the box for millions and millions of iOS and Mac users.
b) this is ridiculously insecure - as soon as anyone breaches your email account they have access to any other service using this scheme, without any way to know (i.e no password reset by the attacker)
a) is proof that this can be "solved" by browser vendors.
b) is the reason this should be solved by browser vendors.
a) password managers don't have to be terrible third party solutions. Safari has an amazing password manager with strong random suggestions, and it's just enabled out of the box for millions and millions of iOS and Mac users.
b) this is ridiculously insecure - as soon as anyone breaches your email account they have access to any other service using this scheme, without any way to know (i.e no password reset by the attacker)
a) is proof that this can be "solved" by browser vendors. b) is the reason this should be solved by browser vendors.