if you have good password hygiene is doing a lot of work here. such a large population of the world does not have this, credential stuffing is a huge class of vuln