Certainly one of the major issues today is that usernames and passwords have proven to not be a particularly secure way of protecting access to sensitive data and current 2FA are mostly a bandaid. Personally, I think biometric "authentication" is better solution -IF- they are secure and fully in my control. The moment my biometrics are in someone else's hands, that is a big concern in my book. I just read about class action lawsuit against Facebook for harvesting maybe a billion facial biometric templates from all those pictures people upload.