> I weep at the thought that every site will require login with sso from google (and maybe Apple if you're lucky)

I think that's where we're going. Not only is it a decent way of filtering out bad accounts, it's also often easier to implement on the dev side.